-
-
Notifications
You must be signed in to change notification settings - Fork 0
/
firestore.rules
79 lines (73 loc) · 3.41 KB
/
firestore.rules
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
rules_version = '2';
service cloud.firestore {
match /databases/{database}/documents {
match /{document=**} {
allow read, write: if false;
}
// オリジナル情報
// ユーザー情報
match /users/{userId} {
allow get: if request.auth.token.admin == true || request.auth.uid == userId;
allow list: if request.auth.token.admin == true;
allow create: if request.auth.token.admin == true || request.auth.uid == userId;
allow update: if request.auth.token.admin == true || request.auth.uid == userId;
}
// 店舗情報
match /users/{userId}/stores/{storeId} {
allow get: if request.auth.token.admin == true || (request.auth.uid == userId && request.auth.uid == storeId);
allow list: if request.auth.token.admin == true;
allow create: if request.auth.token.admin == true || (request.auth.uid == userId && request.auth.uid == storeId);
allow update: if request.auth.token.admin == true || (request.auth.uid == userId && request.auth.uid == storeId);
}
// 店舗KYC秘密情報
match /users/{userId}/stores/{storeId}/kyc/secret {
allow get: if request.auth.token.admin == true;
allow list: if request.auth.token.admin == true;
allow create: if request.auth.token.admin == true;
allow update: if request.auth.token.admin == true;
}
// 商品情報
match /users/{userId}/stores/{storeId}/items/{itemId} {
allow get: if request.auth.token.admin == true || (request.auth.uid == userId && request.auth.uid == storeId);
allow list: if request.auth.token.admin == true || (request.auth.uid == userId && request.auth.uid == storeId);
allow create: if request.auth.token.admin == true || (request.auth.uid == userId && request.auth.uid == storeId);
allow update: if request.auth.token.admin == true || (request.auth.uid == userId && request.auth.uid == storeId);
}
// 注文情報(購入者視点)
match /users/{userId}/orders/{orderId} {
allow get: if request.auth.token.admin == true || request.auth.uid == userId;
allow list: if request.auth.token.admin == true || request.auth.uid == userId;
allow create: if request.auth.token.admin == true || request.auth.uid == userId;
allow update: if request.auth.token.admin == true;
}
// 価格情報
match /exchanges/{exchangeId}/tickers/{tickerId}/currencies/{currencyId} {
allow get: if true;
allow list: if true;
}
// 設定情報
match /configs/{configId} {
allow get: if true;
allow list: if true;
}
// 公開のためのコピー情報
// 店舗情報
match /stores/{storeId} {
allow get: if true;
allow list: if true;
}
// 商品情報(同一店舗内情報に限る)
match /stores/{storeId}/items/{itemId} {
allow get: if true;
allow list: if true;
}
// 店舗側でのオペレーションのためのコピー情報
// 注文情報(店舗視点)
match /users/{userId}/stores/{storeId}/orders/{orderId} {
allow get: if request.auth.token.admin == true || (request.auth.uid == userId && request.auth.uid == storeId);
allow list: if request.auth.token.admin == true || (request.auth.uid == userId && request.auth.uid == storeId);
allow create: if request.auth.token.admin == true;
allow update: if request.auth.token.admin == true || (request.auth.uid == userId && request.auth.uid == storeId);
}
}
}