Firebase Firestore Query using react-redux-firebase

Question

service cloud.firestore {
  match /databases/{database}/documents {
    match/projects/{project} {
      allow read: if 
       get(/databases/$(database)/documents/projects/$(project)).data.uid == 
       request.auth.uid;
      allow create: if request.auth.uid == request.resource.data.uid;
      allow update, delete: if request.auth.uid == resource.data.uid;
    }
  }
}

here i am doing the queries :

firestoreConnect((props) => { 
  return ([{ collection: 'projects', where: [["uid", "==", props.auth.uid]] }]) 
})

But I am getting an error :

Error with profile listener: Missing or insufficient permissions. Error: Missing or insufficient permissions. at new FirestoreError (index.cjs.js:402).

when i check using simulator entering document id in path i get read access. I am not getting where i am wrong. Maybe in the queries.

When I change the rules to:

allow read : if resource.data.uid == request.auth.uid;

there is no error, and data is displayed.

Why its happening is it bug or i am doing something wrong? I know firebase rules are not filters.

Frank van Puffelen · Accepted Answer · 2018-11-18 04:50:40Z

1

You're reading the documents separately (and unnecessarily), and I don't think the rules engine is able to evaluate and validate that the query will never return disallowed documents against this condition.

Try this:

allow read: if resource.data.uid == request.auth.uid;

answered Nov 18, 2018 at 4:50

Frank van Puffelen

603k85 gold badges895 silver badges869 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Firebase Firestore Query using react-redux-firebase

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related