This repository has been archived by the owner on Sep 16, 2019. It is now read-only.

Database Permissions #13

Open

firebolt55439 opened this issue Jan 19, 2018 · 1 comment

Assignees

Milestone

Collaborator

firebolt55439 commented Jan 19, 2018

Need to prevent: deletion of posts, editing after posting, editing other people's posts, viewing real names in user table.

firebolt55439 added this to the Push to v0.3 milestone

firebolt55439 self-assigned this

Collaborator Author

firebolt55439 commented Jan 19, 2018

Updated the rules slightly:

{
  "rules": {
      "courses": {
        ".read": true,
        ".write": "auth != null && auth.token.email.matches(/.*@students.harker.org$/)"
      },
      "reviews": {
        ".read": true,
        ".write": "auth != null && auth.token.email.matches(/.*@students.harker.org$/)"
      }
  }
}

Need to prevent editing after posting and editing other people's posts.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.