Rocket.Chat/app/lib/server/methods/robotMethods.js

import { Meteor } from 'meteor/meteor';
import { check } from 'meteor/check';
import _ from 'underscore';

import { hasRole } from '../../../authorization';
import * as Models from '../../../models';

Meteor.methods({
	'robot.modelCall'(model, method, args) {
		check(model, String);
		check(method, String);
		if (!Meteor.userId()) {
			throw new Meteor.Error('error-invalid-user', 'Invalid user', {
				method: 'robot.modelCall',
			});
		}
		if (!hasRole(Meteor.userId(), 'robot')) {
			throw new Meteor.Error('error-not-allowed', 'Not allowed', {
				method: 'robot.modelCall',
			});
		}
		const m = Models[model];

		if (!m || !_.isFunction(m[method])) {
			throw new Meteor.Error('error-invalid-method', 'Invalid method', {
				method: 'robot.modelCall',
			});
		}
		const cursor = Models[model][method].apply(Models[model], args);
		return cursor && cursor.fetch ? cursor.fetch() : cursor;
	},
});