Rocket.Chat/packages/rocketchat-authorization/server/models/Base.js

RocketChat.models._Base.prototype.roleBaseQuery = function(userId, scope) { return {} }

RocketChat.models._Base.prototype.findRolesByUserId = function(userId, options) {
	var query = this.roleBaseQuery(userId);
	return this.find(query, { fields: { roles: 1 } });
}

RocketChat.models._Base.prototype.isUserInRole = function(userId, roleName, scope) {
	var query = this.roleBaseQuery(userId, scope);
	query.roles = roleName;
	return !_.isUndefined(this.findOne(query));
}

RocketChat.models._Base.prototype.addRolesByUserId = function(userId, roles, scope) {
	var roles = [].concat(roles);
	var query = this.roleBaseQuery(userId, scope);
	var update = {
		$addToSet: {
			roles: { $each: roles }
		}
	}
	return this.update(query, update);
}

RocketChat.models._Base.prototype.removeRolesByUserId = function(userId, roles, scope) {
	var roles = [].concat(roles);
	var query = this.roleBaseQuery(userId, scope);
	var update = {
		$pullAll: {
			roles: roles
		}
	}
	return this.update(query, update);
}

RocketChat.models._Base.prototype.findUsersInRoles = function() {
	throw new Meteor.Error('overwrite-function', 'You must overwrite this function in the extended classes');
}