Firebase Realtime Database insecure rules

[Parth Shah]

Even tough I added auth.id!=null for read and write in the firebase realtime database rules section, I get daily emails from firebase warning with INSECURE RULES.

Please help

[Sam Stern]

Hi Parth,

Checking for non-null auth is not a very secure rule because it allows any user to read and write that data.  See this section of the documentation for more information:
https://firebase.google.com/docs/rules/insecure-rules#access_for_any_authenticated_user

If this is the behavior you want, there is a link at the bottom of the email to disable the alerts.

- Sam

On Fri, Dec 25, 2020 at 12:33 AM Parth Shah <parth.p...@gmail.com> wrote:

Even tough I added auth.id!=null for read and write in the firebase realtime database rules section, I get daily emails from firebase warning with INSECURE RULES.

Please help

--
You received this message because you are subscribed to the Google Groups "Firebase Google Group" group.
To unsubscribe from this group and stop receiving emails from it, send an email to firebase-tal...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/firebase-talk/f3fc71b4-6529-4e4e-bf4c-bc5bdc051479n%40googlegroups.com.