-
Notifications
You must be signed in to change notification settings - Fork 0
/
firestore.rules
62 lines (55 loc) · 1.66 KB
/
firestore.rules
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
rules_version = '2';
service cloud.firestore {
match /databases/{database}/documents {
// FIXME add unit tests
match /user_data/{userId} {
function isUser() {
return userId == request.auth.uid
}
function affectedKeys() {
return request.resource.data.diff(resource.data).affectedKeys();
}
function newKeys() {
return request.resource.data.keys();
}
match /{data=**} {
// restricted this so that users can't just write willy nilly
allow read: if isUser()
}
match /songs/{songId} {
function validUpdate() {
// Just check top level keys
return (
affectedKeys().hasOnly([
'lastPlayed',
'played',
'liked',
'downloadUrl',
'artwork',
'whenLiked',
'title',
'artist',
'albumArtist',
'albumName',
'genre',
'year',
'track',
'disk',
'updatedAt',
]) &&
affectedKeys().hasAll(['updatedAt']) &&
debug(request.resource.data.title).size() > 0
)
}
allow update: if isUser() && validUpdate()
}
match /playlists/{playlistId} {
allow update: if isUser() && affectedKeys().hasOnly(['name', 'songs', 'deleted', 'updatedAt']) && affectedKeys().hasAll(['updatedAt'])
allow create: if isUser() && newKeys().hasAll(['name', 'createdAt', 'id', 'songs', 'updatedAt', 'deleted'])
}
match /feedback/{feedbackId} {
allow create: if isUser()
}
}
}
}