emotion-creators/firestore.rules at main · ahn009/emotion-creators · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
rules_version = '2';

service cloud.firestore {
  match /databases/{database}/documents {
    match /messages/{messageId} {
      function validTemplate() {
        return request.resource.data.template in [
          'love',
          'sorry',
          'birthday',
          'gratitude',
          'congrats',
          'congratulations',
          'friendship',
          'missing-you',
          'miss-you',
          'motivation',
          'encouragement',
          'get-well'
        ];
      }

      function validCreate() {
        return request.resource.data.keys().hasOnly([
          'id',
          'template',
          'senderName',
          'recipientName',
          'messageBody',
          'customColor',
          'musicMood',
          'createdAt',
          'viewCount',
          'isPremium',
          'userId'
        ])
        && request.resource.data.id == messageId
        && validTemplate()
        && request.resource.data.senderName is string
        && request.resource.data.senderName.size() > 0
        && request.resource.data.senderName.size() <= 50
        && request.resource.data.recipientName is string
        && request.resource.data.recipientName.size() > 0
        && request.resource.data.recipientName.size() <= 50
        && request.resource.data.messageBody is string
        && request.resource.data.messageBody.size() >= 10
        && request.resource.data.messageBody.size() <= 2000
        && request.resource.data.viewCount == 0
        && request.resource.data.isPremium == false
        && (
          request.resource.data.userId == null
          || (request.auth != null && request.resource.data.userId == request.auth.uid)
        );
      }

      function viewCountOnlyIncrement() {
        return request.resource.data.diff(resource.data).changedKeys().hasOnly(['viewCount'])
          && request.resource.data.viewCount == resource.data.viewCount + 1;
      }

      function ownsMessage() {
        return request.auth != null && resource.data.userId == request.auth.uid;
      }

      function claimAnonymousMessage() {
        return request.auth != null
          && resource.data.userId == null
          && request.resource.data.diff(resource.data).changedKeys().hasOnly(['userId'])
          && request.resource.data.userId == request.auth.uid;
      }

      function ownerEditsAllowedFields() {
        return ownsMessage()
          && request.resource.data.diff(resource.data).changedKeys().hasOnly([
            'template',
            'senderName',
            'recipientName',
            'messageBody',
            'customColor',
            'musicMood'
          ])
          && request.resource.data.id == resource.data.id
          && request.resource.data.userId == resource.data.userId
          && request.resource.data.isPremium == resource.data.isPremium
          && request.resource.data.viewCount == resource.data.viewCount
          && validTemplate()
          && request.resource.data.senderName is string
          && request.resource.data.senderName.size() > 0
          && request.resource.data.senderName.size() <= 50
          && request.resource.data.recipientName is string
          && request.resource.data.recipientName.size() > 0
          && request.resource.data.recipientName.size() <= 50
          && request.resource.data.messageBody is string
          && request.resource.data.messageBody.size() >= 10
          && request.resource.data.messageBody.size() <= 2000;
      }

      allow create: if validCreate();
      allow read: if true;
      allow update: if viewCountOnlyIncrement() || claimAnonymousMessage() || ownerEditsAllowedFields();
      allow delete: if ownsMessage();
    }
  }
}