-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathfirestore.rules
More file actions
62 lines (59 loc) · 1.78 KB
/
firestore.rules
File metadata and controls
62 lines (59 loc) · 1.78 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
rules_version = '2';
service cloud.firestore {
match /databases/{database}/documents {
function isSignedIn() {
return request.auth != null;
}
// Users can only read/write their own user document
match /users/{userId} {
allow read: if isSignedIn() && userId == request.auth.uid;
allow create, update, delete: if isSignedIn() && userId == request.auth.uid;
}
// Generic rule for app collections: require authentication
// Collections discovered from the codebase (src/database/firebase/config.ts)
match /shops/{document=**} {
allow read, write: if isSignedIn();
}
match /items/{document=**} {
allow read, write: if isSignedIn();
}
match /parts/{document=**} {
allow read, write: if isSignedIn();
}
match /services/{document=**} {
allow read, write: if isSignedIn();
}
match /completions/{document=**} {
allow read, write: if isSignedIn();
}
match /settings/{document=**} {
allow read, write: if isSignedIn();
}
match /archive/{document=**} {
allow read, write: if isSignedIn();
}
match /types/{document=**} {
allow read, write: if isSignedIn();
}
match /invoices/{document=**} {
allow read, write: if isSignedIn();
}
match /logs/{document=**} {
// App writes logs client-side; restrict to authenticated users
allow read, write: if isSignedIn();
}
match /transactions/{document=**} {
allow read, write: if isSignedIn();
}
match /leases/{document=**} {
allow read, write: if isSignedIn();
}
match /leaseCompletions/{document=**} {
allow read, write: if isSignedIn();
}
// Fallback: deny everything else by default
match /{document=**} {
allow read, write: if false;
}
}
}