Update private user rule to check id field
This commit is contained in:
parent
348c8d565a
commit
8e51f68430
|
@ -16,7 +16,7 @@ service cloud.firestore {
|
||||||
}
|
}
|
||||||
|
|
||||||
match /private-users/{userId} {
|
match /private-users/{userId} {
|
||||||
allow read: if resource.data.creatorId == request.auth.uid || isAdmin();
|
allow read: if resource.data.id == request.auth.uid || isAdmin();
|
||||||
}
|
}
|
||||||
|
|
||||||
match /contracts/{contractId} {
|
match /contracts/{contractId} {
|
||||||
|
|
Loading…
Reference in New Issue
Block a user