Proper testing of firestore security rules

jkomoros / card-web

The web app behind thecompendium.cards

Apache License 2.0

46 stars 8 forks source link

Open jkomoros opened 4 years ago

jkomoros commented 4 years ago

Especially using the firestore emulator (which is new?)

jkomoros commented 4 years ago

useful for #184 and #270

jkomoros commented 4 years ago

jkomoros commented 4 years ago

[x] Finish all of the conditions checks for writes on cards
[x] Test that setting updates on anything that has updates works for admins
[ ] Verify that creates on messages, threads, and other things by non-admins have only whitelisted fields
[x] Wait, updating cards message, thread count fields should require a non anon user