Course-Compass/my-app/firebase_rules.json at c830abd7ac19389cc3febd03499786da18f78185 · InferenceKTH/Course-Compass · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
{
  "rules": {
    // Courses and Metadata
    "courses": {
      ".read": true,
      ".write": "auth != null && auth.uid === 'adminuid'"
    },
    "metadata": {
      ".read": true,
      ".write": "auth != null && auth.uid === 'adminuid'"
    },
    "departments": {
      ".read": true,
      ".write": "auth != null && auth.uid === 'adminuid'"
    },
    "locations": {
      ".read": true,
      ".write": "auth != null && auth.uid === 'adminuid'"
    },

    // Reviews and Comments
    "reviews": {
      ".read": true,
      "$courseCode": {
        "$userID": {
          // Only the review owner can write the main review fields (not including comments)
          ".write": "auth != null && (auth.uid === $userID)",

          // Allow anyone to write a comment
          "comments": {
            ".read": true,
            "$commentId": {
              ".write": "auth != null",
              ".validate": "newData.hasChildren(['userName', 'text', 'timestamp']) &&
                            newData.child('userName').isString() &&
                            newData.child('text').isString() &&
                            newData.child('timestamp').isNumber()"
            }
          }
        }
      }
    },

    // Users
    "users": {
      "$userID": {
        ".read": "auth != null && auth.uid === $userID",
        ".write": "auth != null && auth.uid === $userID"
      }
    }
  }
}