Search⌘ K
Home
Courses
Full-Stack Web Applications with Firebase

Cloud Firestore Security

In this lesson, we will edit security rules so that only authorized users can make a 'write' request. This protects you​ from potential hackers.

We'll cover the following...

Change Your Rules #

For your to-do list, we can set our rules like you see below so that the user who is signed in only has read and write access to their specific list of to-do items.

XML
rules_version = '2';
service cloud.firestore {
  match /databases/{database}/documents {
    match /to-do-lists/{listUID}/{document=**}{
     allow read, write: if request.auth.uid == listUID
    }
  }
}

Let’s Break This Down #

Match the Database

...