From 4cb3a29aeff08059811761dc4a220a774b3e1450 Mon Sep 17 00:00:00 2001 From: NorbiPeti Date: Fri, 29 Jan 2021 01:46:40 +0100 Subject: [PATCH] Rule update --- firestore.rules | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/firestore.rules b/firestore.rules index ee941a1..ec1f393 100644 --- a/firestore.rules +++ b/firestore.rules @@ -4,17 +4,16 @@ service cloud.firestore { function sameUser(user) { return request.auth != null && request.auth.uid == user; } - /*function getUserData() { + function getUserData() { return get(/databases/$(database)/documents/users/$(request.auth.uid)).data; - }*/ + } //Felhasználói adatok kezelése match /users/{user} { - allow create: if sameUser(user) && request.auth.uid == request.resource.data.author_uid; - allow get, list, update, delete: if sameUser(user) && request.auth.uid == resource.data.author_uid; + allow read, write: if sameUser(user) && request.auth.uid == request.resource.data.author_uid; } - //Adminoknak mindent lehet + //Adminisztrátoroknak mindent lehet match /data/{document=**} { allow get, list, create, update, delete: if auth.token.admin; } @@ -22,6 +21,7 @@ service cloud.firestore { match /data/subjects/{subject=**} { allow get, list: if request.auth.uid in resource.data.students; } + //Az oktatók módosithatják a követelményeket match /data/subjects/{subject}/requirements/{requirement=**} { allow read, write: if request.auth.uid in resource.data.teachers; }