database.rules.json

{
  "rules": {
    ".read": false,
    ".write": false,
    "rooms": {
      "$roomId": {
        ".read": "data.child('admins').child(auth.uid).child('enabled').val() === true",
        ".write": "data.child('admins').child(auth.uid).child('enabled').val() === true",
        "admins": {
          "$uid": {
            "enabled": {
              ".validate": "newData.isBoolean()"
            }
          }
        },
        "config": {
          ".read": true
        },
        "settings": {
          ".read": true,
          "acceptingSubmissions": { ".validate": "newData.isBoolean()" }
        },
        "profiles": {
          ".read": true,
          "$uid": {
            ".write": "$uid === auth.uid",
            ".validate": "newData.hasChildren(['name'])",
            "name": {
              ".validate": "newData.val() === auth.token.name"
            }
          }
        },
        "presence": {
          ".read": true,
          "$uid": {
            ".write": "$uid === auth.uid",
            ".validate": "newData.isNumber() && newData.val() === now"
          }
        },
        "publicSubmissions": {
          ".read": true,
          "$uid": {
            ".write": "$uid === auth.uid && data.parent().parent().child('settings').child('acceptingSubmissions').val() === true",
            ".validate": "newData.hasChildren(['submittedAt', 'data'])",
            "submittedAt": {
              ".validate": "newData.isNumber() && newData.val() === now"
            },
            "data": {
              ".validate": "newData.isString()"
            }
          }
        },
        "privateSubmissions": {
          "$uid": {
            ".read": "$uid === auth.uid",
            ".write": "$uid === auth.uid && data.parent().parent().child('settings').child('acceptingSubmissions').val() === true",
            ".validate": "newData.hasChildren(['submittedAt', 'data'])",
            "submittedAt": {
              ".validate": "newData.isNumber() && newData.val() === now"
            },
            "data": {
              ".validate": "newData.isString()"
            }
          }
        }
      }
    }
  }
}