prono/database.rules.json at master · BrechtBa/prono · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
{
  "rules": {
    "$tenant": {
      "active_prono": {
        ".read": "auth != null",
        ".write": "auth != null && root.child($tenant).child('users').child(auth.uid).child('permissions').child('admin').val() === true"
      },
      "name": {
        ".read": "auth != null",
        ".write": "auth != null && root.child($tenant).child('users').child(auth.uid).child('permissions').child('admin').val() === true"
      },
      "pronodata": {
        "$prono": {
          "competition":{
             ".read": "auth != null",
             ".write": "auth != null && root.child($tenant).child('users').child(auth.uid).child('permissions').child('editor').val() === true"
          },
          "deadlines":{
             ".read": "auth != null",
             ".write": "auth != null && root.child($tenant).child('users').child(auth.uid).child('permissions').child('editor').val() === true"
          },
          "rules":{
             ".read": "auth != null",
             ".write": "auth != null && root.child($tenant).child('users').child(auth.uid).child('permissions').child('admin').val() === true"
          },
          "settings":{
             ".read": "auth != null",
             ".write": "auth != null && root.child($tenant).child('users').child(auth.uid).child('permissions').child('admin').val() === true"
          },
          "userpoints":{
             ".read": "auth != null",
             ".write": "auth != null && root.child($tenant).child('users').child(auth.uid).child('permissions').child('admin').val() === true"
          },
          "userpronos": {
            "$uid": {
              "groupwinners": {
                ".write": "auth != null && ((auth.uid == $uid && root.child($tenant).child('pronodata').child($prono).child('competition').child('currentstage').val() === 'groupstage') || root.child($tenant).child('users').child(auth.uid).child('permissions').child('editor').val() === true || root.child($tenant).child('users').child(auth.uid).child('permissions').child('editDisabledProno').val() === true)"
              },
               "hometeamresult": {
                ".write": "auth != null && ((auth.uid == $uid && root.child($tenant).child('pronodata').child($prono).child('competition').child('currentstage').val() === 'groupstage') || root.child($tenant).child('users').child(auth.uid).child('permissions').child('editor').val() === true || root.child($tenant).child('users').child(auth.uid).child('permissions').child('editDisabledProno').val() === true)"
              },
               "knockoutstageteams": {
                ".write": "auth != null && ((auth.uid == $uid && root.child($tenant).child('pronodata').child($prono).child('competition').child('currentstage').val() === 'groupstage') || root.child($tenant).child('users').child(auth.uid).child('permissions').child('editor').val() === true || root.child($tenant).child('users').child(auth.uid).child('permissions').child('editDisabledProno').val() === true)"
              },
               "totalgoals": {
                ".write": "auth != null && ((auth.uid == $uid && root.child($tenant).child('pronodata').child($prono).child('competition').child('currentstage').val() === 'groupstage') || root.child($tenant).child('users').child(auth.uid).child('permissions').child('editor').val() === true || root.child($tenant).child('users').child(auth.uid).child('permissions').child('editDisabledProno').val() === true)"
              },
               "matches": {
                ".write": "auth != null && (auth.uid == $uid || root.child($tenant).child('users').child(auth.uid).child('permissions').child('editor').val() === true || root.child($tenant).child('users').child(auth.uid).child('permissions').child('editDisabledProno').val() === true)"
              },
              ".read": "auth != null && (auth.uid == $uid || root.child($tenant).child('users').child(auth.uid).child('permissions').child('editor').val() === true || root.child($tenant).child('users').child(auth.uid).child('permissions').child('editDisabledProno').val() === true)"
            }
          }
        },
        ".read": "auth != null && root.child($tenant).child('users').child(auth.uid).child('permissions').child('editor').val() === true",
        ".write": "auth != null && root.child($tenant).child('users').child(auth.uid).child('permissions').child('editor').val() === true"
      },
      "pronos":{
        ".read": "auth != null && root.child($tenant).child('users').child(auth.uid).child('permissions').child('admin').val() === true",
        ".write": "auth != null && root.child($tenant).child('users').child(auth.uid).child('permissions').child('admin').val() === true"
      },
      "users": {
        "$uid": {
          "displayName":{
            ".read": "auth != null"
          },
          "permissions":{
            ".read": "auth != null && (auth.uid == $uid || root.child($tenant).child('users').child(auth.uid).child('permissions').child('admin').val() === true)"
          },
          "profilePicture":{
             ".read": "auth != null"
          },
          ".write": "auth != null && (auth.uid == $uid || root.child($tenant).child('users').child(auth.uid).child('permissions').child('admin').val() === true)"
        },
        ".read": "auth != null"
      }
    }
  }
}