Training Trains Internship
Student login
← Firebase learning path
Firebase · Module 5 of 10

Security Rules

Protect data with Firestore and Storage Security Rules.

📖 Key ideas

  1. Rules run on Google servers for every client request.
  2. match /users/{uid} { allow read, write: if request.auth.uid == uid; }
  3. request.auth holds the signed-in user; resource.data is existing data.
  4. Validate fields in rules: request.resource.data.score is int.
  5. Test rules with the emulator; never leave "allow read, write: if true".
💡 Real-life example: Security rules are bouncers at every door checking ID and the guest list before letting anyone in.
Security RulesServer-enforced access policies
request.authInfo about the signed-in user
resource.dataExisting document data
request.resource.dataIncoming new data