Create security rules for firebase - Githubissues

3meters / patchr-ios

Next incarnation of Patchr for iOS

1 stars 0 forks source link

Create security rules for firebase #14

Closed Jaymassena closed 7 years ago

Jaymassena commented 7 years ago

Read Write Rules

Users

Only owner can write their user record
Only auth users can read

Queue

Only auth user or service can write
Only service can read

Counters

Only service can write
Only auth user can read

Unreads

Only auth user or system can write
Only auth user or system can read

Invites

Only system can write
Only auth user can read

Groups

Only members can read
Only owners can write

Channels

Only members can read private channels
Only members can write to public or private channels.

Messages

Only owner can write
Only auth users can read
Only members can read messages in private channels

Jaymassena commented 7 years ago

See rules.bolt and the security tests for the most up to date spec on security.