firestore : Security Rules

[webcre...@gmail.com]

hie,

I have a problem with Security Rules

I get this error for any access to any data (articles, categories...)

ERROR FirebaseError: "Missing or insufficient permissions."

why ??

articles
         key
             name
             ...
             uid  (key user)
categories
         key
             ...
...

service cloud.firestore {

  match /databases/{database}/documents {

  

    match /articles/{key} {

      allow read, create: if isSignedIn();

      allow update, delete:     if isOwner();

    }

  }

}

function isOwner() {

  return request.auth.uid == incomingData().uid

}

function isSignedIn() {

  return request.auth.uid != null

}

please, help ! :)

[Samuel Stern]

Could you show the code you're running that gives you the permission denied error?  Is it a write or a read?  That will help us figure out why you're getting permission denied.

Also what is "incomingData()" in your security rules?  I don't see that defined anywhere.

- Sam

--
You received this message because you are subscribed to the Google Groups "Firebase Google Group" group.
To unsubscribe from this group and stop receiving emails from it, send an email to firebase-tal...@googlegroups.com.
To post to this group, send email to fireba...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/firebase-talk/456db0e9-e959-4ccf-a7a1-1e945b7731ab%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[webcre...@gmail.com]

incomingData()    -->    https://gist.github.com/mono0926/a22dbdff7c5f87080b92fbb7944a1f1

[Samuel Stern]

Unfortunately that gist link does not load for me (404), maybe it's private?  Also could you show the app code resulting in permission denied?

- Sam

On Wed, Aug 29, 2018 at 8:03 AM <webcre...@gmail.com> wrote:

incomingData()    -->    https://gist.github.com/mono0926/a22dbdff7c5f87080b92fbb7944a1f1

--
You received this message because you are subscribed to the Google Groups "Firebase Google Group" group.
To unsubscribe from this group and stop receiving emails from it, send an email to firebase-tal...@googlegroups.com.
To post to this group, send email to fireba...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/firebase-talk/bb9bfcae-500b-4793-806a-4439d6f40247%40googlegroups.com.

[webcre...@gmail.com]

sorry

i forgot this part:

function incomingData() {

  return request.resource.data;

}

service cloud.firestore {

        match /databases/{database}/documents {

        match /articles/{key} {

            allow read, create:    if isSignedIn();

            allow update, delete:  if isOwner();

        }

    }

}

function isOwner() {

    return request.auth.uid == incomingData().uid

}

function isSignedIn() {

    return request.auth.uid != null

}

function incomingData() {

  return request.resource.data;

}

now it looks like it works !

thk