CPD-Gitty/trainerbox/firestore.rules

24 lines
839 B
Plaintext

rules_version = '2';
service cloud.firestore {
match /databases/{database}/documents {
// Benutzer können ihre eigenen Daten lesen und schreiben
match /User/{userId} {
allow read, write: if request.auth != null && request.auth.uid == userId;
}
// Trainer können ihre eigenen Trainings verwalten
match /Training/{trainingId} {
allow read: if request.auth != null;
allow write: if request.auth != null &&
get(/databases/$(database)/documents/User/$(request.auth.uid)).data.role == 'trainer';
}
// Übungen können von allen gelesen werden
match /Exercise/{exerciseId} {
allow read: if request.auth != null;
allow write: if request.auth != null &&
get(/databases/$(database)/documents/User/$(request.auth.uid)).data.role == 'trainer';
}
}
}