storage.rules

rules_version = '2';

service firebase.storage {
  match /b/{bucket}/o {
    match /agenda-images/{allImages=**} {
      allow read;
      allow write: if request.auth != null && request.auth.token.isAdmin == true;
    }

    match /agenda-items/{agendaId=**} {
      allow read;
      allow create: if request.auth != null;
    }
  }
}