storage.rules

rules_version = '2';

// Craft rules based on data in your Firestore database
// allow write: if firestore.get(
//    /databases/(default)/documents/users/$(request.auth.uid)).data.isAdmin;
service firebase.storage {
  match /b/{bucket}/o {
    match /{allPaths=**} {
      allow read, write: if false;
    }

    match /proposal-attachments/{proposalId}/{document=**} {
      allow read: if true;
      allow write: if request.auth != null && (
        request.resource.contentType.matches('application/pdf') ||
        request.resource.contentType.matches('image/.*') ||
        request.resource.contentType.matches('text/plain') ||
        // Word documents
        request.resource.contentType.matches('application/msword') ||
        request.resource.contentType.matches('application/vnd.openxmlformats-officedocument.wordprocessingml.document') ||
        // Excel spreadsheets
        request.resource.contentType.matches('application/vnd.ms-excel') ||
        request.resource.contentType.matches('application/vnd.openxmlformats-officedocument.spreadsheetml.sheet') ||
        // PowerPoint presentations
        request.resource.contentType.matches('application/vnd.ms-powerpoint') ||
        request.resource.contentType.matches('application/vnd.openxmlformats-officedocument.presentationml.presentation')
      ) && 
      request.resource.size < 10 * 1024 * 1024;
    }
  }
}