HULKs / mopad

Moderated Organization PAD (powerful, agile, distributed)
MIT License
1 stars 1 forks source link

Restrict Firestore rules for security #13

Closed h3ndrk closed 2 years ago

h3ndrk commented 3 years ago

We need proper rules in firestore.rules s.t. we restrict only authenticated and authorized users to read or make changes to Firestore. This requires evaluating document fields within rules. All features of the frontend (signing in, listing teams, creating talks, editing talks, etc.) must be represented by the rules.