PlateUp/database.rules.json at main · ossdaiict/PlateUp · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
{
  "rules": {
    ".read": false,
    ".write": false,

    "canteens": {
      ".read": "auth != null",
      ".write": "auth != null && root.child('admin_users').child(auth.uid).exists()",
      "$canteenId": {
        ".write": "auth != null && (root.child('canteen_owners').child(auth.uid).val() == $canteenId || root.child('admin_users').child(auth.uid).exists())"
      }
    },

    "vendor_credentials": {
      "$canteenId": {
        ".read": false,
        ".write": false,
        "fcmTokens": {
          "$tokenKey": {
            ".read": "auth != null && (root.child('canteen_owners').child(auth.uid).val() == $canteenId || root.child('admin_users').child(auth.uid).exists())",
            ".write": "auth != null && (root.child('canteen_owners').child(auth.uid).val() == $canteenId || root.child('admin_users').child(auth.uid).exists())"
          }
        }
      }
    },

    "canteen_owners": {
      "$uid": {
        ".read": "auth != null && (auth.uid == $uid || root.child('admin_users').child(auth.uid).exists())",
        ".write": false
      }
    },

    "admin_users": {
      "$uid": {
        ".read": "auth != null && (auth.uid == $uid || root.child('admin_users').child(auth.uid).exists())",
        ".write": false
      }
    },

    "menus": {
      ".read": "auth != null",
      "$canteenId": {
        ".write": "auth != null && (root.child('canteen_owners').child(auth.uid).val() == $canteenId || root.child('admin_users').child(auth.uid).exists())",
        "$menuItemId": {
          "averageRating": {
            ".write": "auth != null"
          },
          "reviewCount": {
            ".write": "auth != null"
          }
        }
      }
    },

    "orders": {
      ".indexOn": ["userId", "canteenId", "status", "canteenId_status_pickupCode", "pickupCode", "pickupToken", "paymentId"],
      ".read": "auth != null && ((query.orderByChild == 'userId' && query.equalTo == auth.uid) || (query.orderByChild == 'canteenId' && query.equalTo == root.child('canteen_owners').child(auth.uid).val()) || root.child('admin_users').child(auth.uid).exists())",
      "$orderId": {
        ".read": "auth != null && (data.child('userId').val() == auth.uid || root.child('canteen_owners').child(auth.uid).val() == data.child('canteenId').val() || root.child('admin_users').child(auth.uid).exists())",
        ".write": "auth != null && (data.child('userId').val() == auth.uid || root.child('canteen_owners').child(auth.uid).val() == data.child('canteenId').val() || root.child('admin_users').child(auth.uid).exists())"
      }
    },

    "orderFeedback": {
      ".indexOn": ["canteenId", "userId"],
      ".read": "auth != null && (root.child('admin_users').child(auth.uid).exists() || root.child('canteen_owners').child(auth.uid).exists())",
      "$feedbackId": {
        ".read": "auth != null && (data.child('userId').val() == auth.uid || root.child('canteen_owners').child(auth.uid).val() == data.child('canteenId').val() || root.child('admin_users').child(auth.uid).exists())",
        ".write": "auth != null && !data.exists() && newData.child('userId').val() == auth.uid",
        ".validate": "newData.hasChildren(['orderId', 'userId', 'overallRating']) && newData.child('overallRating').isNumber() && newData.child('overallRating').val() >= 1 && newData.child('overallRating').val() <= 5"
      }
    },

    "students": {
      "$uid": {
        ".read": "auth != null && (auth.uid == $uid || root.child('admin_users').child(auth.uid).exists() || root.child('canteen_owners').child(auth.uid).exists())",
        ".write": "auth != null && auth.uid == $uid",
        ".validate": "newData.hasChildren(['name', 'email', 'phoneNumber'])"
      }
    },

    "carts": {
      "$uid": {
        ".read": "auth != null && auth.uid == $uid",
        ".write": "auth != null && auth.uid == $uid"
      }
    },

    "reviews": {
      "$menuItemId": {
        ".read": "auth != null",
        ".indexOn": ["menuItemId"],
        "$reviewId": {
          ".write": "auth != null && (root.child('admin_users').child(auth.uid).exists() || ((!data.exists() || data.child('userId').val() == auth.uid) && (!newData.exists() || newData.child('userId').val() == auth.uid)))",
          ".validate": "newData.exists() ? (newData.hasChildren(['rating', 'comment', 'userId', 'menuItemId']) && newData.child('rating').isNumber() && newData.child('rating').val() >= 1 && newData.child('rating').val() <= 5 && newData.child('comment').isString() && newData.child('comment').val().length <= 500) : true"
        }
      }
    },

    "menu_requests": {
      ".read": "auth != null && (root.child('admin_users').child(auth.uid).exists() || root.child('canteen_owners').child(auth.uid).exists())",
      ".indexOn": ["status", "canteenId"],
      "$requestId": {
        ".read": "auth != null && (data.child('canteenId').val() == root.child('canteen_owners').child(auth.uid).val() || root.child('admin_users').child(auth.uid).exists())",
        ".write": "auth != null && (root.child('canteen_owners').child(auth.uid).val() == newData.child('canteenId').val() || root.child('admin_users').child(auth.uid).exists())"
      }
    },

    "notifications": {
      "$uid": {
        ".read": "auth != null && auth.uid == $uid",
        ".indexOn": ["read"],
        "$notificationId": {
          ".write": "auth != null && auth.uid == $uid && newData.exists() && data.exists() && newData.hasChildren(['notificationId', 'userId', 'title', 'message', 'timestamp', 'read', 'type'])",
          ".validate": "newData.child('read').isBoolean() && newData.child('notificationId').val() == data.child('notificationId').val() && newData.child('userId').val() == data.child('userId').val() && newData.child('title').val() == data.child('title').val() && newData.child('message').val() == data.child('message').val() && newData.child('timestamp').val() == data.child('timestamp').val() && newData.child('type').val() == data.child('type').val() && newData.child('orderId').val() == data.child('orderId').val()"
        }
      }
    },

    "admin": {
      ".read": false,
      ".write": false
    },

    "admin_portal": {
      ".read": false,
      ".write": false
    },

    "admin_logs": {
      ".read": false,
      ".write": false
    }
  }
}