Allow admins to see private-users info

This commit is contained in:
Austin Chen 2022-01-24 00:45:46 -06:00
parent 98064119e1
commit e7ef6134b5
3 changed files with 15 additions and 3 deletions

View File

@ -4,4 +4,4 @@
"prod": "mantic-markets",
"dev": "dev-mantic-markets"
}
}
}

View File

@ -1,6 +1,10 @@
{
"functions": {
"predeploy": "npm --prefix \"$RESOURCE_DIR\" run build",
"runtime": "nodejs12"
"runtime": "nodejs12",
"source": "functions"
},
"firestore": {
"rules": "firestore.rules"
}
}

View File

@ -1,14 +1,22 @@
rules_version = '2';
// To deploy: `firebase deploy --only firestore:rules`
service cloud.firestore {
match /databases/{database}/documents {
function isAdmin() {
return request.auth.uid == 'igi2zGXsfxYPgB0DJTXVJVmwCOr2' // Austin
|| request.auth.uid == '5LZ4LgYuySdL1huCWe7bti02ghx2' // James
|| request.auth.uid == 'tlmGNz9kjXc2EteizMORes4qvWl2' // Stephen
|| request.auth.uid == 'IPTOzEqrpkWmEzh6hwvAyY9PqFb2' // Manifold
}
match /users/{userId} {
allow read;
}
match /private-users/{userId} {
allow read: if resource.data.creatorId == request.auth.uid;
allow read: if resource.data.creatorId == request.auth.uid || isAdmin();
}
match /contracts/{contractId} {