teraplay/database.rules.json at master · saahiyo-cloud/teraplay · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
{
  "rules": {
    "users": {
      "$uid": {
        ".read": "auth != null && auth.uid == $uid",
        ".write": "auth != null && auth.uid == $uid"
      }
    },

    "discoverVideos": {
      ".read": "auth != null",
      "$videoId": {
        ".write": "auth != null && (auth.token.admin === true || (!data.exists() && newData.child('uploader/uid').val() == auth.uid) || (data.exists() && data.child('uploader/uid').val() == auth.uid))"
      }
    },

    "categories": {
      ".read": "auth != null",
      ".write": "auth != null && auth.token.admin === true"
    },

    "topCreators": {
      ".read": "auth != null",
      ".write": "auth != null && auth.token.admin === true"
    },

    "config": {
      ".read": "auth != null",
      ".write": "auth != null && auth.token.admin === true"
    },

    "auditLogs": {
      ".read": "auth != null && auth.token.admin === true",
      ".write": "auth != null && auth.token.admin === true",
      "$logId": {
        ".validate": "newData.hasChildren(['uid', 'email', 'action', 'target', 'timestamp'])"
      }
    }
  }
}