File tree Expand file tree Collapse file tree 1 file changed +11
-11
lines changed Expand file tree Collapse file tree 1 file changed +11
-11
lines changed Original file line number Diff line number Diff line change @@ -123,31 +123,31 @@ service cloud.firestore {
123123 function signedIn() {
124124 return request.auth != null;
125125 }
126-
126+
127127 function isAdmin() {
128- return signedIn() &&
128+ return signedIn() &&
129129 'ADMIN'in get(/databases/$(database)/documents/users/$(request.auth.uid)).data.roles.values();
130130 }
131-
132- function ownsMessage () {
131+
132+ function isOwner () {
133133 return signedIn() && request.auth.uid == resource.data.userId;
134134 }
135-
135+
136136 function isSelf() {
137137 return signedIn() && request.auth.uid == resource.id;
138138 }
139-
139+
140140 // Rules
141141 match /users/{userId} {
142- allow get: if isSelf();
143142 allow list: if isAdmin();
144- allow write: if isSelf() || isAdmin();
143+ allow get, update, delete: if isSelf() || isAdmin();
144+ allow create: if signedIn();
145145 }
146-
146+
147147 match /messages/{messageId} {
148148 allow read: if signedIn();
149- allow create: if signedIn();
150- allow update, delete: if signedIn() && ownsMessage ();
149+ allow create: if signedIn() && request.resource.data.userId == request.auth.uid ;
150+ allow update, delete: if signedIn() && isOwner ();
151151 }
152152 }
153153}
You can’t perform that action at this time.
0 commit comments