📦 fredsa / sauer.lists

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21rules_version = '2';

service cloud.firestore {
  match /databases/{database}/documents {
    match /users/{userId} {
      // Users own themselves.
      allow create, read, update, delete: if request.auth != null
        && request.auth.uid == userId;
    }
    match /lists/{list} {
      // Registered users can create new lists.
    	allow create: if request.auth != null
        && exists(/databases/$(database)/documents/users/$(request.auth.uid));
			
      // Users own their lists.
      allow list, read, update, delete: if request.auth != null
        && request.auth.uid in resource.data.users;
    }
  }
}