From 64fd6c02f772886ac3c826399075d9ba69f77986 Mon Sep 17 00:00:00 2001
From: Tyler Renelle <tylerrenelle@gmail.com>
Date: Thu, 13 Nov 2014 23:00:22 -0700
Subject: [PATCH] fix(mods): restricted projected fields for mods-listing.
 Also, static-bind for perf

---
 src/models/user.js               | 8 ++++++--
 views/options/social/tavern.jade | 8 ++++----
 2 files changed, 10 insertions(+), 6 deletions(-)

diff --git a/src/models/user.js b/src/models/user.js
index 0d377efa3c..d1d4682f70 100644
--- a/src/models/user.js
+++ b/src/models/user.js
@@ -463,6 +463,10 @@ UserSchema.methods.unlink = function(options, cb) {
 module.exports.schema = UserSchema;
 module.exports.model = mongoose.model("User", UserSchema);
 
-mongoose.model("User").find({$query:{'contributor.admin':true}, $orderby:{'contributor.level':-1, 'backer.npc':-1, 'profile.name':1}},function(err,mods){
-  module.exports.mods = mods
+mongoose.model("User")
+  .find({'contributor.admin':true})
+  .sort('-contributor.level -backer.npc profile.name')
+  .select('profile contributor backer')
+  .exec(function(err,mods){
+    module.exports.mods = mods
 });
diff --git a/views/options/social/tavern.jade b/views/options/social/tavern.jade
index 91b5d8caa3..72826de4fc 100644
--- a/views/options/social/tavern.jade
+++ b/views/options/social/tavern.jade
@@ -149,10 +149,10 @@
         != ' ' + env.t('tavernAlert1') + ' <a href="https://github.com/HabitRPG/habitrpg/issues/2760" target="_blank">' + env.t('tavernAlert2') + '</a>.<br />' + env.t('moderatorIntro1')
         span(ng-repeat='mod in env.mods')
           |&nbsp; &nbsp;
-          span(ng-if='mod.contributor.admin',popover=env.t('gamemaster'),popover-trigger='mouseenter',popover-placement='right')
-            a.label.label-default(ng-class='userLevelStyle(mod)', ng-click='clickMember(mod._id, true)')
-              {{mod.profile.name}}&nbsp;
-              span(ng-class='userAdminGlyphiconStyle(mod)')
+          span(ng-if='::mod.contributor.admin',popover=env.t('gamemaster'),popover-trigger='mouseenter',popover-placement='right')
+            a.label.label-default(ng-class='::userLevelStyle(mod)', ng-click='clickMember(mod._id, true)')
+              {{::mod.profile.name}}&nbsp;
+              span(ng-class='::userAdminGlyphiconStyle(mod)')
         p
           =env.t('communityGuidelinesRead1')
           | &nbsp;