Disallow users deleting contracts (#99)

This commit is contained in:
Marshall Polaris 2022-04-27 00:34:23 -07:00 committed by GitHub
parent 1db1a739cf
commit c0d6e17060
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -13,7 +13,7 @@ service cloud.firestore {
match /users/{userId} { match /users/{userId} {
allow read; allow read;
allow update: if resource.data.id == request.auth.uid allow update: if resource.data.id == request.auth.uid
&& request.resource.data.diff(resource.data).affectedKeys() && request.resource.data.diff(resource.data).affectedKeys()
.hasOnly(['bio', 'bannerUrl', 'website', 'twitterHandle', 'discordHandle']); .hasOnly(['bio', 'bannerUrl', 'website', 'twitterHandle', 'discordHandle']);
} }
@ -39,7 +39,6 @@ service cloud.firestore {
allow update: if request.resource.data.diff(resource.data).affectedKeys() allow update: if request.resource.data.diff(resource.data).affectedKeys()
.hasOnly(['description', 'closeTime', 'tags', 'lowercaseTags']); .hasOnly(['description', 'closeTime', 'tags', 'lowercaseTags']);
allow update: if isAdmin(); allow update: if isAdmin();
allow delete: if resource.data.creatorId == request.auth.uid;
} }
match /{somePath=**}/bets/{betId} { match /{somePath=**}/bets/{betId} {
@ -65,4 +64,4 @@ service cloud.firestore {
allow write: if request.auth.uid == userId; allow write: if request.auth.uid == userId;
} }
} }
} }