Skip to content

Commit d7d0baa

Browse files
docs(readme): update to fix permissions error
fixes #10
1 parent b0da40d commit d7d0baa

File tree

1 file changed

+11
-11
lines changed

1 file changed

+11
-11
lines changed

README.md

+11-11
Original file line numberDiff line numberDiff line change
@@ -123,31 +123,31 @@ service cloud.firestore {
123123
function signedIn() {
124124
return request.auth != null;
125125
}
126-
126+
127127
function isAdmin() {
128-
return signedIn() &&
128+
return signedIn() &&
129129
'ADMIN'in get(/databases/$(database)/documents/users/$(request.auth.uid)).data.roles.values();
130130
}
131-
132-
function ownsMessage() {
131+
132+
function isOwner() {
133133
return signedIn() && request.auth.uid == resource.data.userId;
134134
}
135-
135+
136136
function isSelf() {
137137
return signedIn() && request.auth.uid == resource.id;
138138
}
139-
139+
140140
// Rules
141141
match /users/{userId} {
142-
allow get: if isSelf();
143142
allow list: if isAdmin();
144-
allow write: if isSelf() || isAdmin();
143+
allow get, update, delete: if isSelf() || isAdmin();
144+
allow create: if signedIn();
145145
}
146-
146+
147147
match /messages/{messageId} {
148148
allow read: if signedIn();
149-
allow create: if signedIn();
150-
allow update, delete: if signedIn() && ownsMessage();
149+
allow create: if signedIn() && request.resource.data.userId == request.auth.uid
150+
allow update, delete: if signedIn() && isOwner();
151151
}
152152
}
153153
}

0 commit comments

Comments
 (0)