open.source/manifold
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Forbid reads from unauthenticated users

Browse Source
This commit is contained in:
Austin Chen 2022-03-01 16:31:03 -08:00
parent a722de09d0
commit eef35cd7d0
1 changed files with 13 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
firestore.rules
View File

@ -5,14 +5,16 @@ service cloud.firestore {
match /databases/{database}/documents {
function isAdmin() {
return request.auth.uid == 'igi2zGXsfxYPgB0DJTXVJVmwCOr2' // Austin
|| request.auth.uid == '5LZ4LgYuySdL1huCWe7bti02ghx2' // James
|| request.auth.uid == 'tlmGNz9kjXc2EteizMORes4qvWl2' // Stephen
|| request.auth.uid == 'IPTOzEqrpkWmEzh6hwvAyY9PqFb2' // Manifold
return request.auth.uid == 'OTd2JFY7LOdvQg2ZQGYLUqrXAiD2' // Austin
|| request.auth.uid == 'czxKSN1Z03Mzu7UqIio3ppM0eDt2' // David
}
function isAuthed() {
return request.auth != null
}
match /users/{userId} {
allow read;
allow read: if isAuthed();
allow update: if resource.data.id == request.auth.uid
&& request.resource.data.diff(resource.data).affectedKeys()
.hasOnly(['bio', 'bannerUrl', 'website', 'twitterHandle', 'discordHandle']);
@ -23,7 +25,7 @@ service cloud.firestore {
}
match /contracts/{contractId} {
allow read;
allow read: if isAuthed();
allow update: if request.resource.data.diff(resource.data).affectedKeys()
.hasOnly(['description', 'closeTime', 'tags', 'lowercaseTags']);
allow update: if isAdmin();
@ -31,25 +33,25 @@ service cloud.firestore {
}
match /{somePath=**}/bets/{betId} {
allow read;
allow read: if isAuthed();
}
match /{somePath=**}/comments/{commentId} {
allow read;
allow read: if isAuthed();
allow create: if request.auth != null;
}
match /{somePath=**}/answers/{answerId} {
allow read;
allow read: if isAuthed();
}
match /folds/{foldId} {
allow read;
allow read: if isAuthed();
allow update, delete: if request.auth.uid == resource.data.curatorId;
}
match /{somePath=**}/followers/{userId} {
allow read;
allow read: if isAuthed();
allow write: if request.auth.uid == userId;
}
}