Step 11.9: Only publish tasks the current user can see.

simple-todos-react.jsx

@@ -17,7 +17,12 @@ if (Meteor.isClient) {
 
 if (Meteor.isServer) {
   Meteor.publish("tasks", function () {
-    return Tasks.find();
+    return Tasks.find({
+     $or: [
+       { private: { $ne: true }},
+       { owner: this.userId }
+     ]
+    });
   });
 }