Firebase 实时数据库规则-auth

Question

if my data structure is like the following (example: an array of books)

     books: 
           0 :    name = book1,
                    id= 123

           1: name = book2,
                id = 456

           2: name = book3,
                id = 789

how can I grant read and write access in firebase realtime database for the '/books' url? Please note that my 'auth.id' matches the 'id' inside each book.

so the data is (books/0/id == auth.id) but the url access to read and write is for '/books'. Is there a way to use the id and grant access at a parent level?

I tried the following,

        "rules"
             "books" 
                  "$id" {".read" : $id == auth.uid} 

but no luck..

Thanks

Answer 1

Since you are working with arrays, I guess that $id captures just the index. So, you'd try the following:

{
  "rules": {
    "books": {
      "$book_index": {
        ".read" : "data.child('id').val() == auth.uid"
      }
    }
  }
}

• https://firebase.google.com/docs/database/security/rules-conditions