forked from googleinterns/step87-2020
-
Notifications
You must be signed in to change notification settings - Fork 0
/
rtdb-rules.json
32 lines (32 loc) · 1.22 KB
/
rtdb-rules.json
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
{
"rules": {
".read": false,
".write": false,
"$workspaceID": {
// TA and student can only be updated by the server.
"student": {
".write": false,
".read": false
},
"ta": {
".write": false,
".read": false
},
"classID": {
".read": "root.child($workspaceID).child('student').val() === auth.uid || root.child($workspaceID).child('ta').val() === auth.uid"
},
// You must be the TA or student to read or write to a file.
"files": {
".read": "root.child($workspaceID).child('student').val() === auth.uid || root.child($workspaceID).child('ta').val() === auth.uid",
".write": "root.child($workspaceID).child('student').val() === auth.uid || root.child($workspaceID).child('ta').val() === auth.uid"
},
// Downloads, executions, and environment are read-only by clients.
"downloads": {
".read": "root.child($workspaceID).child('student').val() === auth.uid || root.child($workspaceID).child('ta').val() === auth.uid"
},
"executions": {
".read": "root.child($workspaceID).child('student').val() === auth.uid || root.child($workspaceID).child('ta').val() === auth.uid"
}
}
}
}