servicecloud.firestore{match/databases/{database}/documents{match/onlinestore/{document}{allowread:iffalse;allowwrite:iffalse;}match/onlinestore/elish/admins/{documents}{allowread:iftrue;allowwrite:iffalse;}match/onlinestore/elish/carts/{documents}{allowread:ifrequest.auth.uid!=null&&request.auth.uid==get(/databases/$(database)/documents/onlinestore/elish/carts/$(document)).data.authid;allowwrite:ifrequest.auth.uid!=null;}match/onlinestore/elish/product/{documents}{allowread:iftrue;allowwrite:ifrequest.auth.uid!=null;}// rules for estore collectionsmatch/estore/{document}{allowread:ifrequest.auth.uid==get(/databases/$(database)/documents/estore/$(request.auth.uid)).data.authid;allowwrite:iffalse;}match/estore/{document}/product/{prods}{allowread:iftrue;allowwrite:ifrequest.auth.uid==get(/databases/$(database)/documents/estore/$(request.auth.uid)).data.authid;}match/estore/{document}/cart/{shoppingcart}{allowread:ifisSignedIn()&&isDocOwner();allowwrite:ifisSignedIn();}match/estore/{document}/interests/{shoppingcart}{allowread:iffalse;allowwrite:ifisSignedIn();}// rules for PORTALDB collectionsmatch/portaldb/{portaldb}{      allowread,write:ifrequest.auth.uid!=null;}// rules for USERAUTH collectionsmatch/userauth/{userauth}{      allowread,write:ifrequest.auth.uid!=null;}// rules for USERDB collectionsmatch/userdb/{user}{      allowread,write:ifrequest.auth.uid!=null;}// rules for PORTAL collectionsmatch/portal/{portaldb}{      allowread,write:ifrequest.auth.uid!=null;}// rules for USERS collectionmatch/users/{users}{//allow read: if isDocOwner();//allow create: if isSignedIn();//allow write: if isDocOwner() && get(/databases/$(database)/documents/portal/$(request.resource.data.portal)).data.portal == request.resource.data.portal && get(/databases/$(database)/documents/portal/$(request.resource.data.portal)).data.key == request.resource.data.key;    allowread,write:ifrequest.auth.uid!=null;}}// helper functionsfunctionisDocOwner(){// assuming document has a field author which is uid// Only the authenticated user who authored the document can read or writereturnrequest.auth.uid==resource.data.author;// This above read query will fail// The query fails even if the current user actually is the author of every story document.//  The reason for this behavior is that when Cloud Firestore applies your security rules,//  it evaluates the query against its potential result set,//   not against the actual properties of documents in your database.//   If a query could potentially include documents that violate your security rules,//   the query will fail.//   on your client app, make sure to include following//   .where("author", "==", this.afAuth.auth.currentUser.uid)}functionisSignedIn(){// check if user is signed inreturnrequest.auth.uid!=null;}functionisAdmin(){returnget(/databases/$(database)/documents/attendanceusers/$(request.auth.uid)).data.isAdmin==true;}// examples from firestorefunctionsignedInOrPublic(){// True if the user is signed in or the requested data is 'public'// assuming document has a field name 'visibility'returnrequest.auth.uid!=null||resource.data.visibility=='public';}functiongetRole(rsc){// Read from the "roles" map in the resource (rsc).returnrsc.data.roles[request.auth.uid];}functionisOneOfRoles(rsc,array){// Determine if the user is one of an array of rolesreturnisSignedIn()&&(getRole(rsc)inarray);}functiononlyContentChanged(){// Ensure that user is not updating their own roles// fields are added to the document.returnrequest.resource.data.roles=='';}functionisModuleAdmin(){returnget(/databases/$(database)/documents/payrollusers/$(request.auth.uid)).data.roles["admin"]==true;}}