database.rules.json

{
  "rules": {
    "users": {
      ".read": "auth !== null",
      ".indexOn": [
        "filter",
        "updatedAt"
      ],
      "$userId": {
        ".write": "auth !== null && (auth.uid === $userId || root.child('admins').child(auth.uid).exists())"
      }
    },
    "pairs": {
      ".indexOn": [
        "updatedAt"
      ],
      "$pairId": {
        ".read": "auth !== null && $pairId.contains(auth.uid)",
        ".write": "auth !== null && $pairId.contains(auth.uid)"
      }
    },
    "chats": {
      "$userId": {
        ".read": "auth !== null && (auth.uid === $userId || root.child('admins').child(auth.uid).exists())",
        ".write": "auth !== null && auth.uid === $userId"
      }
    },
    "rooms": {
      ".read": "auth !== null",
      ".indexOn": [
        "filter",
        "closedAt"
      ],
      "$roomId": {
        ".write": "auth !== null && auth.uid === newData.child('userId').val()"
      }
    },
    "messages": {
      "$roomId": {
        ".read": "auth !== null",
        ".indexOn": [
          "createdAt"
        ],
        "$messageId": {
          ".write": "auth !== null && auth.uid === newData.child('userId').val()",
          ".validate": "newData.hasChild('content')",
          "content": {
            ".validate": "newData.isString() && newData.val().length <= 1024"
          }
        }
      }
    },
    "accesses": {
      "$accessId": {
        ".write": "auth !== null"
      }
    },
    "expires": {
      "$expireId": {
        ".write": "auth !== null"
      }
    },
    "admins": {
      ".read": "auth !== null",
      ".write": false,
      "$userId": {
        ".read": "auth !== null && auth.uid === $userId"
      }
    },
    "reports": {
      ".read": "auth !== null && root.child('admins').child(auth.uid).exists()",
      ".indexOn": [
        "status",
        "createdAt"
      ],
      "$reportId": {
        ".read": "auth !== null && (data.child('userId').val() === auth.uid || root.child('admins').child(auth.uid).exists())",
        ".write": "auth !== null && ((!data.exists() && newData.child('userId').val() === auth.uid) || (data.exists() && root.child('admins').child(auth.uid).exists()))",
        ".validate": "newData.hasChildren(['userId', 'chatId', 'partnerDisplayName', 'createdAt', 'status'])",
        "userId": {
          ".validate": "newData.isString()"
        },
        "chatId": {
          ".validate": "newData.isString()"
        },
        "partnerDisplayName": {
          ".validate": "!newData.exists() || newData.isString()"
        },
        "createdAt": {
          ".validate": "newData.isNumber()"
        },
        "status": {
          ".validate": "newData.isString() && (newData.val() === 'pending' || newData.val() === 'resolved')"
        },
        "resolution": {
          ".validate": "!newData.exists() || (newData.isString() && newData.val().length <= 1000)"
        },
        "adminId": {
          ".validate": "!newData.exists() || (newData.isString() && root.child('admins').child(newData.val()).exists())"
        },
        "resolvedAt": {
          ".validate": "!newData.exists() || newData.isNumber()"
        }
      }
    }
  }
}