Demo:fix

mong_usr.js

 db.users.insert([
     // User: author, Pwd: author
-    {"_id":"author","name":"Author","type":"PF@EFI;","roles":{"user","author"},"hash":"sha256","salt":"SIzKNsNKsCRVr8a9U90q6A==","pwd":"HZly68TSAKHioz6Kz0QCbXVTHpT6hMmabUbFYVlCMeE=","abos":[],"bookmarks":[]},
+    {"_id":"author","name":"Author","type":"PF@EFI;","roles":{"user":true,"author":true},"hash":"sha256","salt":"SIzKNsNKsCRVr8a9U90q6A==","pwd":"HZly68TSAKHioz6Kz0QCbXVTHpT6hMmabUbFYVlCMeE=","abos":[],"bookmarks":[]},
     // User: admin, Pwd: SwenMho
 //    {"_id":"admin","name":"Test Admin","type":"MA@AMP;","roles":'{"user":true,"author":true,"admin":true}',"hash":"sha256","salt":"z3PNXGmQaWvaT7m2ZlT+0w==","pwd":"nfUfNv032J745xj3Hzya3Mkk43Dz/H0BmNTZhtx8UM0=","abos":["veniam","ipsum"],"bookmarks":[],},
 ])

server/authorization.js

 
 // Return user role, query from found.mail
 function getUserRole(found) {
-    var roles = "user";
+    var roles = "user:true";
     var mail = found.mail;
     if (!/\d/.test(mail)) {
         // Mail contains no number
-        roles += ',"author"';
+        roles += ',"author:true"';
     }
     return ('{'+roles+'}');
 }