Firebase Console Security& Firestore规则最佳实践
寻找有关保护Firebase控制台的最佳实践信息。我正在Firestore中构建具有敏感数据的应用程序。我们有关于客户访问的良好规则 - 但我担心的是如何保护Firebase控制台。似乎没有适用于控制台的Firestore规则(我可以理解)。但是无论如何我都没有看到在控制台中添加颗粒状安全性。看来,如果我让用户视图访问权限,他们就有一切。
有没有一种方法可以使用控制台用户可以访问的内容?
Looking for best practices info on securing Firebase console. I'm building an application with sensitive data in Firestore. We've got good rules around client access - but my concern is how to secure Firebase console. It doesn't seem that Firestore rules apply in console (I can understand that). But I haven't seen anyway to add granular security in console. It seems that if I give a user View access, they have everything.
Is there a way to get granular with what a console user has access to?
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。

绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(1)
Firebase控制台没有任何安全规则概念。您只能将授权用户添加到您的Firebase Project团队中。如果您需要限制访问而无需自己构建自定义客户端,请尝试使用 flamelink 。
There isn't any security rules concept for Firebase console. You should only add authorized users to your Firebase project's team. If you need to restrict access without building a custom client yourself, try using a CMS like Flamelink.