fix: improve database rules
This commit is contained in:
@@ -1,7 +1,12 @@
|
|||||||
service cloud.firestore {
|
service cloud.firestore {
|
||||||
match /databases/{database}/documents {
|
match /databases/{database}/documents {
|
||||||
match /{document=**} {
|
match /{document=**} {
|
||||||
allow read, write: if request.auth != null;
|
allow read: if request.auth != null
|
||||||
|
&& request.auth.uid == resource.data.userId
|
||||||
|
&& request.auth.token.email_verified;
|
||||||
|
allow write: if request.auth != null
|
||||||
|
&& request.auth.uid == resource.data.userId
|
||||||
|
&& request.auth.token.email_verified;
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|||||||
Reference in New Issue
Block a user