telegram/firestore.rules at main · TanUIUX/telegram · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
// ===============================================================
// Assumed Data Model
// ===============================================================
//
// Collection: categories
// Collection: products
// Collection: product_stocks
// Collection: customers
// Collection: orders
// Collection: transactions
// Collection: promotions
// Collection: configs
// Collection: bot_logs

rules_version = '2';
service cloud.firestore {
  match /databases/{database}/documents {

    function isAuthenticated() {
      return request.auth != null;
    }

    function isAdmin() {
      return isAuthenticated() && request.auth.token.email_verified == true &&
        request.auth.token.email == "website.uxf2@gmail.com";
    }

    // Default deny
    match /{document=**} {
      allow read, write: if false;
    }

    match /test/{docId} {
      allow read, write: if true;
    }

    match /categories/{docId} {
      allow read: if true;
      allow write: if isAdmin();
    }
    match /products/{docId} {
      allow read: if true;
      allow write: if isAdmin();
    }
    match /product_stocks/{docId} {
      allow read: if true; // Temporarily open for webhook delivery
      allow write: if true; // Temporarily open for webhook delivery
    }
    match /customers/{docId} {
      allow read, write: if true; // Temporarily open for webhook
    }
    match /orders/{docId} {
      allow read, write: if true; // Temporarily open for webhook
    }
    match /transactions/{docId} {
      allow read, write: if true; // Temporarily open for webhook
    }
    match /promotions/{docId} {
      allow read: if true;
      allow write: if isAdmin();
    }
    match /configs/{docId} {
      allow read: if true; // Temporarily open for webhook to read bot configs
      allow write: if isAdmin();
    }
    match /bot_logs/{docId} {
      allow read, write: if true; // Temporarily open for webhook
    }
  }
}