Understanding Firestore Security Rules with Examples

[@bernardobellobriceno178]

Thank you so much for the explanation man... You explained it way better than the Firebase guys

[@bitculator]

I love how absolutely no one shows how to validate data from a parent document inside a subcollection... or working with subcollections at all.

[@CaseyKasem41]

Lots of 'hello world' youtubers ne'er a 'create security rules based on the field values of a nested map' youtubers

[@kenworldtechnologies1567]

The best explanation so far. Thank you man

[@Manudoido100]

Thank you, the best tutorial about Firestore rules that I have found. Even if you aren't using Firebase for a Ionic application this video will help you. Thanks again!!

[@jimmyopot1972]

Absolutely indebted to you. Saved my firestore database, which was rendered obsolete.

[@aram5642]

What a fantastic video! Like a missing manual! I am about to build a more complex app with some access levels scheme. Wasn't sure about how and where I should split the access responsibilities between the FE app and rules. Now it is more clear to me. Please make more videos about rules, please do!

[@asmereg]

a little closer, a little closer. Oh, you finally reached what I was exactly looking for. Thanks

[@darkee999]

This is exactly what I needed right now. I can finally understand how to get started with these functions

[@andersbraathen1256]

Great video, thanks!

[@FaeUtero]

Thanks a ton man. Really helpful \m/

[@merakli2022]

thanks for the great lesson.

[@JakeBSHere]

Makes a lot of sense, thanks

[@lrajoo11]

great stuff!

[@sornvengy6828]

Really good bro for this teaching.

[@brandonsayring]

I really appreciate your explanations. Thank you so much!

[@constantinosloizou1263]

Simple tutorial but helped a lot. Thank you my friend

[@ramone09]

Hi! Nice video. I have a chat system but I don't use Google authentication. I only use firebase for messages between users. What would be the best rules for me? Allow only my domain?

[@vijaypawar1316]

Thank you, ❤️ I am looking for data validation. I don't want duplicate the values in the data base such int value of some id

[@cguider6719]

Excellent.

[@weilieschok2001]

can u show a tutorial showing a "role" validation? e.g. Admin user can perform CRUD to all users, but "Employee" user can only READ their own doc

[@Ramstein0121]

Need this also

[@ruangtamu2659]

hi Josh, how to prevent uid not written / store to the document? as we would not want uid stored everywhere

[@raffaelemasucci4082]

Thank you!!!!!!!!!

[@Akeshma]

thanks so much. What about making rules to list only user's posts for that user only?

[@Casal0x]

Can you help us with some tutorial about role-based rules ?

[@DavidLopez-wf1uy]

Hey Josh, nice video!! What about firestore security rules with authentication and role-based security? I don't know if there's something already implemented within firestore or if the role-based security logic has to be implemented by us from scratch. Thank you!

[@MeraBaapHaiTu31]

Thank you bro 👍

[@amao20039714]

Do you think a malicious user can bypass the security rules if they set their uid as " " empty in a doc and somehow in their payload the uid was also " " empty.

[@boyapatiramakrishna2068]

how to incorporate it in the javascript web app? and how to give permissions to custom user id and password

[@vince2nd]

Where can we find the simulator?

[@bongbox]

Can I write to expire disable a document after x interval since it was created?

[@alexpablo90]

Can you explain how use/make in-app purchases?

[@tenuksdnbhd]

Can somebody explain how these security rules works? Why does it seem like ANYONE can spoof the payload content and bypass the security rules?

[@Sampelmind81]

hello from germany! I implemented an android app using the firebase remote config and iam not using the database to store documents. My app request only a string from remote config to encrypt the local sqlite database on the smartphone. Is it necessary to set security rules even if iam not using the database? Thanks!

[@burr1113]

Yes, in any case. The test version is given for 30 days.

[@SachinKumar-xk9gh]

How to restrict read from specific IP address only?

[@oppa5584]

If someone wants to save some time. 4:00

[@WhatIsThisAllAbout]

amazinf bro thanks

[@wilcas5349]

Awe-so-me tutorial.

[@yooscripts5947]

thanks

[@belqisshida5345]

Work step by step and show real example

[@fangzsx0409]

I am here Aug 2021

[@jattarinnontakaew3965]

good

[@eightrice]

this does not work anymore

[@codemind1822]

I wish you showed your database and created a simple database to show what you are searching. I did not really get what you are doing when you put braces and write collection name in singular form...... PASS..

[@dallasrieck7753]

nervous mouse; yikes

[@tcritt]

Podata, podata

[@Alex-hs8xj]

thanks

[@omkarkadam399]

How to validate duplicate entries?

[@tenuksdnbhd]

Can somebody explain how these security rules works? Why does it seem like ANYONE can spoof the payload content and bypass the security rules?