oddbit · DennisAlund · Jul 30, 2024 · Jul 17, 2024 · Jul 17, 2024 · Jul 17, 2024
diff --git a/firestore.rules b/firestore.rules
@@ -6,6 +6,12 @@ service cloud.firestore {
       allow write: if isAtLeastAdmin();
     }
 
+    match /tanam-users/{uid} {
+      allow read: if isSignedInAs(uid);
+      // Delete and create must be done manually
+      allow update: if isSignedInAs(uid) && request.resource.data.role == resource.data.role;
+    }
+
     match /tanam-documents/{documentId} {
       allow read: if hasAnyRole();
       allow write: if isPublisher();
@@ -24,12 +30,8 @@ service cloud.firestore {
       return isSignedIn() && request.auth.token.tanamRole != null;
     }
 
-    function isSuperAdmin() {
-      return hasUserRole("superAdmin");
-    }
-
     function isAtLeastAdmin() {
-      return isSuperAdmin() || hasUserRole("admin");
+      return hasUserRole("admin");
     }
 
     function isPublisher() {

diff --git a/functions/.gitignore b/functions/.gitignore
@@ -1,4 +1,5 @@
 # Compiled JavaScript files
+lib
 lib/**/*.js
 lib/**/*.js.map