We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 320dcff commit 026fbf5Copy full SHA for 026fbf5
firestore.rules
@@ -6,6 +6,10 @@ service cloud.firestore {
6
return exists(/databases/$(database)/documents/users/$(userId)/coursesOwned/$(courseId))
7
}
8
9
+ function isSubscriber(userId) {
10
+ return "pricingPlanId" in get(/databases/$(database)/documents/users/$(userId)).data
11
+ }
12
+
13
function isUserWithId(userId) {
14
return request.auth.uid == userId;
15
@@ -14,7 +18,7 @@ service cloud.firestore {
18
allow read: if true;
19
16
20
match /lessons/{lessonId} {
17
- allow read: if userOwnsCourse(request.auth.uid,courseId)
21
+ allow read: if userOwnsCourse(request.auth.uid,courseId) || isSubscriber(request.auth.uid)
22
23
24
0 commit comments