Skip to content

Commit df3bbb4

Browse files
committed
Include rules for optional profile fields and update memex-common
1 parent 340b99c commit df3bbb4

File tree

2 files changed

+15
-15
lines changed

2 files changed

+15
-15
lines changed

firebase/firestore.rules

Lines changed: 14 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -383,27 +383,27 @@ service cloud.firestore {
383383
;
384384
allow create: if
385385
// Type checks
386-
request.resource.data.websiteURL is string &&
387-
request.resource.data.mediumURL is string &&
388-
request.resource.data.twitterURL is string &&
389-
request.resource.data.substackURL is string &&
390-
request.resource.data.bio is string &&
391-
request.resource.data.avatarURL is string &&
392-
request.resource.data.paymentPointer is string &&
386+
(!('websiteURL' in request.resource.data.keys()) || request.resource.data.websiteURL is string) &&
387+
(!('mediumURL' in request.resource.data.keys()) || request.resource.data.mediumURL is string) &&
388+
(!('twitterURL' in request.resource.data.keys()) || request.resource.data.twitterURL is string) &&
389+
(!('substackURL' in request.resource.data.keys()) || request.resource.data.substackURL is string) &&
390+
(!('bio' in request.resource.data.keys()) || request.resource.data.bio is string) &&
391+
(!('avatarURL' in request.resource.data.keys()) || request.resource.data.avatarURL is string) &&
392+
(!('paymentPointer' in request.resource.data.keys()) || request.resource.data.paymentPointer is string) &&
393393

394394

395395
// Ownership rules
396396
request.auth.uid == user
397397
;
398398
allow update: if
399399
// Type checks
400-
request.resource.data.websiteURL is string &&
401-
request.resource.data.mediumURL is string &&
402-
request.resource.data.twitterURL is string &&
403-
request.resource.data.substackURL is string &&
404-
request.resource.data.bio is string &&
405-
request.resource.data.avatarURL is string &&
406-
request.resource.data.paymentPointer is string &&
400+
(!('websiteURL' in request.resource.data.keys()) || request.resource.data.websiteURL is string) &&
401+
(!('mediumURL' in request.resource.data.keys()) || request.resource.data.mediumURL is string) &&
402+
(!('twitterURL' in request.resource.data.keys()) || request.resource.data.twitterURL is string) &&
403+
(!('substackURL' in request.resource.data.keys()) || request.resource.data.substackURL is string) &&
404+
(!('bio' in request.resource.data.keys()) || request.resource.data.bio is string) &&
405+
(!('avatarURL' in request.resource.data.keys()) || request.resource.data.avatarURL is string) &&
406+
(!('paymentPointer' in request.resource.data.keys()) || request.resource.data.paymentPointer is string) &&
407407

408408

409409
// Ownership rules

0 commit comments

Comments
 (0)