用于在用户之间共享文档的 Firestore 数据库规则和结构

Question

我正在尝试创建一个允许用户在列表上进行协作的应用程序。每个用户都需要被邀请才能在列表中工作。

我这样构建我的数据（大致基于 this blog post）。如果需要，也可以更改此结构。

list
  list_1:
    users:
      owner:
        owner@company.com: true
      shared:
        user@company.com: true
        user2@company.com: true
    id
    name
    items:
      item_1:
        id:
        name:
      ...

我想要实现的目标：每个人都应该能够创建列表。然后，他们的创建者成为创建列表的所有者。只有 "shared" 文档中的所有者和用户应该能够读取和写入此列表。

我想权限设置应该是这样的。但这不起作用：

service cloud.firestore {
  match /databases/{database}/documents {
    match /lists/{listId}/{anything=**} {
        allow read, write: if !exists(resource.data.users.owner) ||
                               resource.data.users.owner == request.auth.token.email ||
                               request.auth.token.email in resource.data.users.shared
    }
  }
}

Answer 1

我想通了。

我把数据结构改成这样：

list
  list_1
    owner: owner@company.com
    writeAccess: [user1@company.com, user2@company.com]
    id
    name
    items:
      item_1:
        id:
        name:
      ...

然后这样的数据库规则起作用了：

service cloud.firestore {
  match /databases/{database}/documents {
    match /lists/{listId} {
        // Allow RW on lists for owner, shared user or for everyone if it's a new list
      allow read, write: if resource.data.owner == request.auth.token.email ||
                            request.auth.token.email in resource.data.writeAccess ||
                            !exists(/databases/$(database)/documents/lists/$(listId))
    }
    match /lists/{listId}/items/{itemId} {
        // Allow RW on item for owner or shared user of parent list
        allow read, write: if get(/databases/$(database)/documents/lists/$(listId)).data.owner == request.auth.token.email ||
                              request.auth.token.email in get(/databases/$(database)/documents/lists/$(listId)).data.writeAccess ||
                             !exists(/databases/$(database)/documents/lists/$(listId)) // Needed for new lists. Because lists and items are created in a batch
    }
  }
}

用于在用户之间共享文档的 Firestore 数据库规则和结构

Firestore Database Rules and Structure for sharing Documents between users

firebase

firebase-security

google-cloud-firestore