diff --git a/firestore.rules b/firestore.rules index ee941a1..ec1f393 100644 --- a/firestore.rules +++ b/firestore.rules @@ -4,17 +4,16 @@ service cloud.firestore { function sameUser(user) { return request.auth != null && request.auth.uid == user; } - /*function getUserData() { + function getUserData() { return get(/databases/$(database)/documents/users/$(request.auth.uid)).data; - }*/ + } //Felhasználói adatok kezelése match /users/{user} { - allow create: if sameUser(user) && request.auth.uid == request.resource.data.author_uid; - allow get, list, update, delete: if sameUser(user) && request.auth.uid == resource.data.author_uid; + allow read, write: if sameUser(user) && request.auth.uid == request.resource.data.author_uid; } - //Adminoknak mindent lehet + //Adminisztrátoroknak mindent lehet match /data/{document=**} { allow get, list, create, update, delete: if auth.token.admin; } @@ -22,6 +21,7 @@ service cloud.firestore { match /data/subjects/{subject=**} { allow get, list: if request.auth.uid in resource.data.students; } + //Az oktatók módosithatják a követelményeket match /data/subjects/{subject}/requirements/{requirement=**} { allow read, write: if request.auth.uid in resource.data.teachers; }