firestore.rules

rules_version = '2';
service cloud.firestore {
  match /databases/{database}/documents {
    function validRating() {
      return request.resource.data.contentRating >= 0 && request.resource.data.contentRating <= 5 &&
        request.resource.data.styleRating >= 0 && request.resource.data.styleRating <= 5
        && request.resource.data.comment.size() <= 256;
    }

    match /news/{post} {
      // Applies to single document read requests
      allow get;

      // Applies to queries and collection read requests
      allow list;

      // Disallow writes
      allow write: if false;
    }

    match /articles/{post} {
      // Applies to single document read requests
      allow get;

      // Applies to queries and collection read requests
      allow list;

      // Disallow writes
      allow write: if false;
    }

    match /config/{config} {
      allow read, write: if false; // allow each section separately
    }

    match /featuredSessions/{userId} {
      allow read, write: if request.auth.uid == userId;
    }

    match /gallery/{photo} {
      // Applies to single document read requests
      allow get;

      // Applies to queries and collection read requests
      allow list;

      // Disallow writes
      allow write: if false;
    }

    match /notificationsSubscribers/{token} {
      allow list, delete: if false;

      // Applies to document create requests
      allow create;
      allow update;
      allow get;
    }

    match /notificationsUsers/{userId} {
      allow read, write: if request.auth.uid == userId;
    }

    match /schedule/{day} {
      // Applies to single document read requests
      allow get;

      // Applies to queries and collection read requests
      allow list;

      // Disallow writes
      allow write: if false;
    }

    match /generatedSchedule/{day} {
      // Applies to single document read requests
      allow get;

      // Applies to queries and collection read requests
      allow list;

      // Disallow writes
      allow write: if false;
    }

    match /sessions/{session} {
      // Applies to single document read requests
      allow get;

      // Applies to queries and collection read requests
      allow list;

      // Disallow writes
      allow write: if false;

      match /feedback/{userId} {
        allow read, delete: if request.auth.uid == userId;
        allow write: if request.auth.uid == userId && validRating();
      }
    }

    match /generatedSessions/{session} {
      // Applies to single document read requests
      allow get;

      // Applies to queries and collection read requests
      allow list;

      // Disallow writes
      allow write: if false;
    }

    match /pengurus/{pengurusId} {
      // Applies to single document read requests
      allow get;

      // Applies to queries and collection read requests
      allow list;

      // Disallow writes
      allow write: if false;
    }

    match /generatedPengurus/{pengurusId} {
      // Applies to single document read requests
      allow get;

      // Applies to queries and collection read requests
      allow list;

      // Disallow writes
      allow write: if false;
    }

    match /subscribers/{subscriberId} {
      allow delete: if false;

      allow get;
      allow list: if false;

      // Applies to document create requests
      //allow create;
      allow write;
    }

    match /users/{userId} {
      allow list: if false;

      allow get;
      allow read, write: if request.auth.uid == userId;

      allow create, delete: if false;
      allow update: if request.auth.uid == userId;
    }

    match /videos/{video} {
      // Applies to single document read requests
      allow get;

      // Applies to queries and collection read requests
      allow list;

      // Disallow writes
      allow write: if false;
    }
  }
}