firestore.rules

rules_version = '2';

// match /{document=**} {
//   allow read, write: if request.time < timestamp.date(2024, 5, 30);
// }

service cloud.firestore {
  
  match /databases/{database}/documents {

    match /partite/{partita} {

      function isAdmin() {
        return request.auth != null &&
          get(/databases/$(database)/documents/partite/$(partita)/segreti/$(request.auth.token.email)).data.admin == true;
      }

      allow read: if true;
      allow write: if isAdmin();

      match /utenti/{email} {
        allow create, read: if request.auth != null && request.auth.token.email == email;

        allow write: if request.auth != null && request.auth.token.email == email && 
          request.time <= get(/databases/$(database)/documents/partite/$(partita)).data.scadenza;
      }

      match /utenti/{email} {
        allow read: if isAdmin();
        allow read: if request.auth != null
          && request.time > get(/databases/$(database)/documents/partite/$(partita)).data.scadenza;
      }

      match /segreti/{key} {
        allow create, read, write: if isAdmin();
      }
      
    }

  }

}

// service cloud.firestore {
//   match /databases/{database}/documents {
//     match /cities/{city} {
//       // Make sure a 'users' document exists for the requesting user before
//       // allowing any writes to the 'cities' collection
//       allow create: if request.auth != null && exists(/databases/$(database)/documents/users/$(request.auth.uid))

//       // Allow the user to delete cities if their user document has the
//       // 'admin' field set to 'true'
//       allow delete: if request.auth != null && get(/databases/$(database)/documents/users/$(request.auth.uid)).data.admin == true
//     }
//   }
// }