alexabbott / firebase-cms

A CMS + E-commerce platform built with Angular and Firebase
https://fir-cms-76f54.firebaseapp.com/
MIT License
313 stars 125 forks source link

Hardening Firebase Rules #18

Open omer88 opened 6 years ago

omer88 commented 6 years ago

Fixes #17 You can view the security issues in this report.

Solution

I removed the rule ".write": true from admins and users. In addition, I removed the read rule from "/products/$p_id", since it was useless because of the ".read": true under products.

Please tell me if there is a problem with reading all the products.

An analysis on the fixed rules can be seen here.