Update security rule

canopas · Jan 7, 2025 · 23a16b0 · 23a16b0
1 parent 8338ef7
commit 23a16b0
Showing 1 changed file with 7 additions and 6 deletions.
diff --git a/firestore.rules b/firestore.rules
@@ -48,14 +48,15 @@ service cloud.firestore {
                      resource.data.members.hasAny([request.auth.uid]);
 
       allow create: if isAuthorized() &&
-      				   isCurrentUser(request.resource.data.created_by);
+      				      isCurrentUser(request.resource.data.created_by);
 
       allow update: if isAuthorized() &&
-      				   (resource.data.members.hasAny([request.auth.uid]) ||
-                       (!resource.data.members.hasAny([request.auth.uid]) &&
-                            request.resource.data.diff(resource.data).affectedKeys().hasOnly(["members"])
-                       )
-                    );
+                    (resource.data.members.hasAny([request.auth.uid]) ||
+                      (!resource.data.members.hasAny([request.auth.uid]) && 
+                        request.resource.data.diff(resource.data).affectedKeys().hasOnly(["members"])
+                      )
+                    )
+                    || request.resource.data.keys().hasAny(["updated_at", "updated_by"]);
 
       allow delete: if isAuthorized() &&
    		resource.data.members.hasAny([request.auth.uid]);