-
Notifications
You must be signed in to change notification settings - Fork 0
/
firestore.rules
38 lines (30 loc) · 980 Bytes
/
firestore.rules
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
rules_version = '2';
service cloud.firestore {
match /databases/{database}/documents {
allow read, write: if false;
match /users/{userId}/schedules/{timeHash} {
allow read, delete: if checkValidity() &&
isVerifiedUser(userId) &&
hasVerifiedEmail();
allow create, update: if checkValidity() &&
isVerifiedUser(userId) &&
hasVerifiedEmail() &&
additionalWritePermission(userId);
}
}
}
function checkValidity() {
return request.auth != null
}
function isVerifiedUser(userId) {
return request.auth.uid == userId
}
function hasVerifiedEmail() {
return request.auth.token.email_verified
}
function additionalWritePermission(userId) {
return request.resource.data.time is string &&
request.resource.data.cause is string &&
request.resource.data.amount is number;
}
// firebase deploy --only firestore:rules