Platform

Firebase breaks

Firebase breaks: allow read, write: if true, any signed-in user, and a child rule that cannot revoke a parent. Simulator checks are for your own project.

3 cards are tagged Firebase. Symptoms in this set: Over-open rules. Open a card for the root cause, the fix prompt, and the self-check. The check is only for an app you own.

• Over-open rules

  Firebase rules allow every read and write

  The app was created in Firebase Test mode, or the rules say allow read, write: if true. Anyone who knows the project can read and overwrite the data.

• Over-open rules

  Any signed-in Firebase user can read the whole database

  Signed-out visitors are blocked. Any account, including one you just created, can read and write every document.

• Over-open rules

  A deeper Firebase rule cannot take access away

  A child path sets ".read": false, and clients can still read it.