Understanding Firestore Security Rules with Examples

In this video, we take a look at the basics of Firestore Security Rules and how they are used to secure access to data in your Firestore database.

PREVIOUS TUTORIALS

#firestore #security #ionic

[bitculator]

I love how absolutely no one shows how to validate data from a parent document inside a subcollection... or working with subcollections at all.

[Manudoido]

Thank you, the best tutorial about Firestore rules that I have found. Even if you aren't using Firebase for a Ionic application this video will help you. Thanks again!!

[bernardobellobriceno]

Thank you so much for the explanation man... You explained it way better than the Firebase guys

[darkee]

This is exactly what I needed right now. I can finally understand how to get started with these functions

[aram]

What a fantastic video! Like a missing manual! I am about to build a more complex app with some access levels scheme. Wasn't sure about how and where I should split the access responsibilities between the FE app and rules. Now it is more clear to me. Please make more videos about rules, please do!

[asmereg]

a little closer, a little closer. Oh, you finally reached what I was exactly looking for. Thanks

[kenworldtechnologies]

The best explanation so far. Thank you man

[jimmyopot]

Absolutely indebted to you. Saved my firestore database, which was rendered obsolete.

[brandonsayring]

I really appreciate your explanations. Thank you so much!

[constantinosloizou]

Simple tutorial but helped a lot. Thank you my friend

[DavidLopez-wfuy]

Hey Josh, nice video!! What about firestore security rules with authentication and role-based security? I don't know if there's something already implemented within firestore or if the role-based security logic has to be implemented by us from scratch. Thank you!

[Akeshma]

thanks so much. What about making rules to list only user's posts for that user only?

[vijaypawar]

Thank you, ❤️ I am looking for data validation. I don't want duplicate the values in the data base such int value of some id

[ramone]

Hi! Nice video. I have a chat system but I don't use Google authentication. I only use firebase for messages between users. What would be the best rules for me? Allow only my domain?

[alexpablo]

Can you explain how use/make in-app purchases?

[bongbox]

Can I write to expire disable a document after x interval since it was created?

[Casalx]

Can you help us with some tutorial about role-based rules ?

[weilieschok]

can u show a tutorial showing a "role" validation? e.g. Admin user can perform CRUD to all users, but "Employee" user can only READ their own doc

[amao]

Do you think a malicious user can bypass the security rules if they set their uid as " " empty in a doc and somehow in their payload the uid was also " " empty.

[ruangtamu]

hi Josh, how to prevent uid not written / store to the document? as we would not want uid stored everywhere