Allow admins to see private-users info
This commit is contained in:
		
							parent
							
								
									98064119e1
								
							
						
					
					
						commit
						e7ef6134b5
					
				|  | @ -4,4 +4,4 @@ | |||
|     "prod": "mantic-markets", | ||||
|     "dev": "dev-mantic-markets" | ||||
|   } | ||||
| } | ||||
| } | ||||
|  |  | |||
|  | @ -1,6 +1,10 @@ | |||
| { | ||||
|   "functions": { | ||||
|     "predeploy": "npm --prefix \"$RESOURCE_DIR\" run build", | ||||
|     "runtime": "nodejs12" | ||||
|     "runtime": "nodejs12", | ||||
|     "source": "functions" | ||||
|   }, | ||||
|   "firestore": { | ||||
|     "rules": "firestore.rules" | ||||
|   } | ||||
| } | ||||
|  |  | |||
|  | @ -1,14 +1,22 @@ | |||
| rules_version = '2'; | ||||
| 
 | ||||
| // To deploy: `firebase deploy --only firestore:rules` | ||||
| service cloud.firestore { | ||||
|   match /databases/{database}/documents { | ||||
| 
 | ||||
|     function isAdmin() { | ||||
|       return request.auth.uid == 'igi2zGXsfxYPgB0DJTXVJVmwCOr2' // Austin | ||||
|         || request.auth.uid == '5LZ4LgYuySdL1huCWe7bti02ghx2' // James | ||||
|         || request.auth.uid == 'tlmGNz9kjXc2EteizMORes4qvWl2' // Stephen | ||||
|         || request.auth.uid == 'IPTOzEqrpkWmEzh6hwvAyY9PqFb2' // Manifold | ||||
|     } | ||||
| 
 | ||||
|     match /users/{userId} { | ||||
|       allow read; | ||||
|     } | ||||
| 
 | ||||
|     match /private-users/{userId} { | ||||
|       allow read: if resource.data.creatorId == request.auth.uid; | ||||
|       allow read: if resource.data.creatorId == request.auth.uid || isAdmin(); | ||||
|     } | ||||
| 
 | ||||
|     match /contracts/{contractId} { | ||||
|  |  | |||
		Loading…
	
		Reference in New Issue
	
	Block a user