how to write rules in firebase realtime database?

Question

I am given secure rules like given below. But when testing in rules playground. When reading & updating - Simulated denied.

{
  "rules": {
    "users": {
      "$uid": {
        ".read": "$uid === auth.uid",
        ".write": "$uid === auth.uid"
      }
    }
  }
}

I need to add json data according to my database structure. Given my realtime database structure. How to write secure rules for read & write?

Amod Gokhale Amod Gokhale · Accepted Answer · 2020-08-05T14:28:33

Change your rules as below

"users": {
      "$uid": {
        ".read": "$uid === auth.uid",
        ".write": "$uid === auth.uid"
      }

Excellent documentation - https://firebase.google.com/docs/database/security

.read and .write rules cascade, so this ruleset grants read access to any data at path /foo/ as well as any deeper paths such as /foo/bar/baz. Note that .read and .write rules shallower in the database override deeper rules, so read access to /foo/bar/baz would still be granted in this example even if a rule at the path /foo/bar/baz evaluated to false.

how to write rules in firebase realtime database?

2 Answers