Security Rules for Firestore - Firebase Firestore

In this video you will learn how to setup your security rules for Firestore to make your database more secure.

⭐ Get certificates for your future job
⭐ Save countless hours of time
⭐ 100% money back guarantee for 30 days
⭐ Become a professional Android developer now:

🎓 Become an industry-ready developer in the Mobile Dev Campus:

🎁 Get my FREE 4.5h course "The Best Practice Guide to Android Architecture":

Read our weekly Android blog:

Content of this video:
Rules Basics: 1:05
Separate Read and Write access: 2:27
For which actions we can setup rules: 2:52
Allow access for authenticated users: 3:50
Declare Rules for specific collections: 5:40
Allow access if a field in the same document equals a specific value: 7:26
Allow writing if the change equals a specific value: 9:28
Allow access if a field in another document equals a specific value: 11:39
Allow access if a specific document exists: 13:31

[ImTheDot]

Awesome. Very simple and straight to the point.

[Jcmacielh]

Studying the firebase rules documentation was on my to-do list for so long now, and I've been procrastinating so much on getting into it. Thank you so much for this great introductory tutorial!

[CybercoderNaj]

This is a very detailed tutorial dedicated especially to explain the firestore rules. Very unique tutorial. Keep growing!

[TheJou]

concrats on this series , i liked that you went straight to the point and not go 5 minutes on creating layout's,
like this series, i will make sure to follow you, right now i can only like and subscribe

[rolinejohnaguilar]

Woah, you really know many things you always amaze me with these stuffs. Learn a lot from this series again. Thank you Phil!

[panosgr]

Really helpful and simple introduction to firebase rules. Thanks for the content!

[mehulbisht]

0:46 when you have already seen so many of Philip's videos after face reveal and you watch this old video which says "AndroidDevs is actually a girl" 😂😂

[kensleylewis]

How do we apply 2 conditions, (example - allow read : if (a) and (b);

[kensleylewis]

how do we add comment tags to this rules panel so that we can add training notes?

[PeterSotosEPT]

at 9:03 you mention that you can check the user role, but this is not really correct. The resource variable that you mention is the document you want to read and not some custom user document. Its the request.auth variable that contains the user data, but I don't know of any capacity for it to contain a role field. Can you comment about how you might actually check for a role? I need to handle roles in my Firestore app. Thanks!

[r.r]

I have been receiving that my fring in X days, and I will not longer be able to access my firestore data unless I update the firestore rules! I followed your tutorial yesterday and updated my firestore rules but at midnight I also received the same email thst it will be expired in 1 day.
I am not using firestoreIl in my application, I am only using realtime databsa! Will i be able to access my realtime database in case the firestore database expires?

[CybercoderNaj]

What is difference between resource.data and request.resource.data?

[need]

hello, I want contact you for something please

[kingfisher]

I can't understand at 10:01 time, , pls help me to understand bro