old-firestore-security-rules

rules_version = '2';
service cloud.firestore {
  match /databases/{database}/documents {

    // This rule allows anyone with your database reference to view, edit,
    // and delete all data in your Firestore database. It is useful for getting
    // started, but it is configured to expire after 30 days because it
    // leaves your app open to attackers. At that time, all client
    // requests to your Firestore database will be denied.
    //
    // Make sure to write security rules for your app before that time, or else
    // all client requests to your Firestore database will be denied until you Update
    // your rules
   // match /{document=**} {
   //   allow read, write;
   // }


     match /Users/{userId} {
      allow create,read: if request.auth != null;
      allow update: if request.auth.uid == userId || request.auth.token.admin == true;
      allow delete: if request.auth.token.admin == true && resource.data.role != 'Admin';
    }  
    
    match /newUsers/{newuserId} {
      allow create,write: if request.auth != null;
    } 
    
    match /Teams/{teamId} {
      allow create,read: if request.auth != null;
      allow update: if request.auth.uid in resource.data.members || request.auth.token.admin == true;
      allow delete: if request.auth.uid == resource.data.createdBy.id || request.auth.token.admin == true;
    }
    
     match /Projects/{projectId} {
       allow read,create,update: if request.auth != null;
       allow delete: if request.auth.token.admin == true;
     }
     
     match /Documents/{documentId} {
       allow read,create,update: if request.auth != null;
       allow delete: if request.auth.token.admin == true;
     }
     
     match /Documents/{documentId}/Attachments/{attachmentId} {
       allow read,create,update: if request.auth != null;
       allow delete: if request.auth.token.admin == true;
     }
     
     match /Requests/{requestId} {
       allow read,create,update: if request.auth != null;
       allow delete: if request.auth.token.admin == true;
     }
     
     match /Messages/{messageId} {
       allow read,create,update: if request.auth != null;
       allow delete: if request.auth.token.admin == true;
     }
     
      match /Messages/{messageId}/AllMessages/{allmessagesId} {
       allow read,create,update: if request.auth != null;
       allow delete: if request.auth.token.admin == true;
     }
     
      match /Chats/{chatId} {
       allow read,create,update: if request.auth != null;
       allow delete: if request.auth.token.admin == true;
     }
     
      match /Chats/{chatId}/Messages/{messageId} {
       allow read,create,update: if request.auth != null;
       allow delete: if request.auth.token.admin == true;
     }
    
     match /DeletedUsers/{deleteduserId} {
       allow read,write: if request.auth.token.admin == true;
     }
   
  }
}