check id on update (#393)

2022-06-02 01:30:36 +02:00 · 2022-06-02 01:30:36 +02:00 · c2f993ddf2
commit c2f993ddf2
parent 78a359407d
1 changed files with 2 additions and 1 deletions
--- a/firestore.rules
+++ b/firestore.rules
@ -45,7 +45,8 @@ service cloud.firestore {
    match /contracts/{contractId} {
      allow read;
      allow update: if request.resource.data.diff(resource.data).affectedKeys()
-        .hasOnly(['description', 'closeTime', 'tags', 'lowercaseTags']);
+        .hasOnly(['description', 'closeTime', 'tags', 'lowercaseTags'])
+        && resource.data.id == request.auth.uid;
      allow update: if isAdmin();
    }