Firebase 规则——无法访问我的收藏

Question

My firestore rule for a collection in my database looks like this

rules_version = '2';
service cloud.firestore {
  match /databases/{database}/documents {
    match /user_data/{accountId}/nfts {
       allow read: if request.auth.token.email[0:42].lower() == acountId.lower();
       //allow read : if true;
       allow write: if false;
    }
  }
}

In my request, path is defined:

path = "/user_data/0x59f5b98d5b5fc01c8ae10238b93618053e62be20/nfts"

This is the correct path of the collection.

The email address of the requested firebase user is

0x59f5b98d5b5fc01c8ae10238b93618053e62be20@mysite.com <-- 42 chars before @ --->

when I attempt a read using:

  let snap = db.collection(path).valueChanges() 
  let val = await firstValueFrom(snap);

I keep getting permission denied. It seems clear that is some problem with the allow read because if change it to allow read: if true; I get back the all the documents in the collection.

I can'tseem to determine what is wrong with with the allow read statement.

Answer 1

You can expand the circle

  allow get: if true;
  allow list: if request.auth != null;
  allow create: if true;
  allow update: if true;
  allow delete: if false

You can control through the existing sections you have with a request uid or email

allow get: if request.auth.= null && request.auth.email == resource.data;{"Here use ur doc name example email"};

request.auth.uid == resource.data.uid Or;