orion.collections.onCreated(function() {
  var self = this;

  /**
   * Collection permissions
   */
  Roles.registerAction('collections.' + this.name + '.index', true);
  Roles.registerAction('collections.' + this.name + '.showCreate', true);
  Roles.registerAction('collections.' + this.name + '.showUpdate', true);
  Roles.registerAction('collections.' + this.name + '.showRemove', true);
  Roles.registerHelper('collections.' + this.name + '.indexFilter', {});

  this.attachRoles('collections.' + this.name);

  if (Meteor.isClient) {
    this.canIndex = function() {
      return Roles.userHasPermission(Meteor.userId(), 'collections.' + self.name + '.index');
    };
    this.canShowCreate = function() {
      return Roles.userHasPermission(Meteor.userId(), 'collections.' + self.name + '.showCreate');
    };
    this.getHiddenFields = function() {
      var docId = RouterLayer.getParam('_id');
      return _.union.apply(this, Roles.helper(Meteor.userId(), 'collections.' + self.name + '.forbiddenFields', docId));
    };
    this.helpers({
      canShowUpdate: function () {
        return Roles.userHasPermission(Meteor.userId(), 'collections.' + self.name + '.showUpdate', this);
      },
      canShowRemove: function() {
        return Roles.userHasPermission(Meteor.userId(), 'collections.' + self.name + '.showRemove', this);
      }
    });
  }
});

@@ -54,16 +54,57 @@
  this;%0A%0A
+  var allow = !this.dontAllowByDefault;%0A%0A
   /**%0A  
@@ -197,20 +197,21 @@
 index', 
-true
+allow
 );%0A  Rol
@@ -268,28 +268,29 @@
 howCreate', 
-true
+allow
 );%0A  Roles.r
@@ -343,28 +343,29 @@
 howUpdate', 
-true
+allow
 );%0A  Roles.r
@@ -426,12 +426,13 @@
 e', 
-true
+allow
 );%0A 
@@ -497,16 +497,25 @@
 Filter',
+ allow &&
  %7B%7D);%0A%0A 

add roles don't allow by default option into collections