解决对燃烧规则的许可

发布于 2025-01-26 08:09:03 字数 742 浏览 2 评论 0原文

我有3个Firestore收藏，发票，客户和Infos。我编写了以下规则以允许在用户身份验证的情况下允许在Firestore中读写。

rules_version = '2';
service cloud.firestore {
match /databases/{database}/documents {
 match /{document=**} {
  allow read, write: if request.auth != null;
  }
 }
}

我只想将此规则应用于Invoices和客户端 collections。对于Infos，每个人都应该能够从集合中读取和写入而无需认证。我试图按以下方式更改规则：

rules_version = '2';
service cloud.firestore {
match /databases/{database}/documents {
 match /{document=**} {
  allow read, write: if request.auth != null;
  }
 }
 match /databases/{database}/documents {
 match /Infos {
  allow read, write: if true;
  }
 }
}

但是，当我尝试从Infos读取数据而未经过身份验证时，我仍然会获得权限拒绝错误。

原文

I have 3 Firestore collections, Invoices, Clients, and Infos. I wrote the following rule to allow read and write in Firestore only if the user is authenticated.

rules_version = '2';
service cloud.firestore {
match /databases/{database}/documents {
 match /{document=**} {
  allow read, write: if request.auth != null;
  }
 }
}

I want to apply this rule only to the Invoices and Clients collections. For Infos, everyone should be able to read and write from the collection without authentication. I tried to change the rule as follows:

rules_version = '2';
service cloud.firestore {
match /databases/{database}/documents {
 match /{document=**} {
  allow read, write: if request.auth != null;
  }
 }
 match /databases/{database}/documents {
 match /Infos {
  allow read, write: if true;
  }
 }
}

But I still get a permission denied error when I try to read data from Infos without being authenticated.

分享到QQ

分享到微博

如果你对这篇内容有疑问，欢迎到本站社区发帖提问参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。

发布评论

需要登录才能够评论，你可以免费注册一个本站的账号。

樱花细雨 2025-02-02 08:09:03

以下规则应该解决问题：

rules_version = '2';
service cloud.firestore {
  match /databases/{database}/documents {
    match /Infos/{infoId} {
      allow read, write: if true;
    }
    match /Invoices/{invoiceId} {
      allow read, write: if request.auth != null;
    }
    match /Clients/{clientId} {
      allow read, write: if request.auth != null;
    }
  }
}

对于发票和客户端集合，您将能够读取并写入文档中的用户仅如果对它们进行身份验证，而对于Infos集合，则每个人都可以做到这一点，无论是否经过身份验证。

The following rules should do the trick:

rules_version = '2';
service cloud.firestore {
  match /databases/{database}/documents {
    match /Infos/{infoId} {
      allow read, write: if true;
    }
    match /Invoices/{invoiceId} {
      allow read, write: if request.auth != null;
    }
    match /Clients/{clientId} {
      allow read, write: if request.auth != null;
    }
  }
}

For the Invoices and Clients collection, the users you'll be able to read and write into the documents only if they are authenticated, while for the Infos collection, everybody will be able to do that, no matter if it's authenticated or not.

回复收藏 0 原文

~没有更多了~