-
Notifications
You must be signed in to change notification settings - Fork 0
/
firestore.rules
27 lines (26 loc) · 1.44 KB
/
firestore.rules
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
rules_version = '2';
service cloud.firestore {
match /databases/{database}/documents {
match /{document=**} {
allow read, write: if false;
}
match /users/{userId} {
allow write: if request.auth != null && request.auth.uid == userId && request.resource.data.admin != true;
allow read: if request.auth != null && exists(/databases/$(database)/documents/users/$(request.auth.uid));
}
match /channels/{channelId} {
allow write: if request.auth != null && exists(/databases/$(database)/documents/users/$(request.auth.uid));//&& get(/databases/$(database)/documents/users/$(request.auth.uid)).data.admin == true;
allow read: if request.auth != null && exists(/databases/$(database)/documents/users/$(request.auth.uid)); // && resource.data.public;
match /messages/{messageId} {
allow write: if request.auth != null && request.auth.uid == request.resource.data.senderId;
allow read: if request.auth != null && exists(/databases/$(database)/documents/users/$(request.auth.uid)); // && resource.data.public;
}
}
match /{document=**}/members/{userId} {
// allow write: if request.auth != null
// && exists(/databases/$(database)/documents/users/$(request.auth.uid))
// && get(/databases/$(database)/documents/channels/$(channelId)).data.public;
allow read: if request.auth != null && exists(/databases/$(database)/documents/users/$(request.auth.uid));
}
}
}