Update security rules

nkalupahana · Jul 22, 2024 · 47372b2 · 47372b2
1 parent f8fc7b3
commit 47372b2
Showing 1 changed file with 12 additions and 8 deletions.
diff --git a/database.rules.json b/database.rules.json
@@ -6,9 +6,6 @@
       ".read": true,
       ".write": false
     },
-    "beginnerQuestions": {
-      ".read": true
-    },
     "$uid": {
       "logs": {
         ".read": "auth != null && auth.uid == $uid"
@@ -44,20 +41,27 @@
         ".read": "auth != null && auth.uid == $uid"
       },
       "onboarding": {
-        ".read": true,
+        ".read": "auth != null && auth.uid == $uid",
         "beginner": {
-          ".write": true,
+          ".write": "auth != null && auth.uid == $uid",
           ".validate": "(newData.isNumber() && newData.val() == now) || newData.val() == false"
         },
         "questions": {
-          ".write": true,
+          ".write": "auth != null && auth.uid == $uid",
           ".validate": "newData.isBoolean()"
         },
         "onboarded": {
-          ".write": true,
+          ".write": "auth != null && auth.uid == $uid",
           ".validate": "newData.isBoolean() && newData.val() == true"
         }
+      },
+      "prompts": {
+        ".read": "auth != null && auth.uid == $uid",
+        "streak": {
+          ".write": "auth != null && auth.uid == $uid",
+          ".validate": "newData.isNumber() && newData.val() > 0"
+        }
       }
     }
   }
-}
+}