firebase rules write permission for only one user

Question

I'm having trouble to write Firebase database rules. I would like to give write permission to only one user i.e admin user. All others will have read permission.

Please help me to write a Firebase database rule to restrict other users to write.

isn't it something like if(auth=={uuid of your choice}) or can you not put a string in the rules? — sfxworks, Jun 28 '17 at 12:09
See https://stackoverflow.com/questions/41771808/how-to-only-allow-one-admin-user-to-write-firebase-database/41775839#41775839 — Frank van Puffelen, Jun 28 '17 at 14:31

score 2 · Answer 1 · answered Jun 28 '17 at 12:25

2

"rules":{
  "users" : {
     "$uid" : {
        ".read" : "auth!=null",
        ".write" : "$uid === adminUID"
      }
   }
}

This will help you

answered Jun 28 '17 at 12:25

Prags

811
5
17

score 1 · Answer 2 · answered Jun 28 '17 at 12:21

{
  "rules": {
    "users": {
      "$uid": {
        ".write": "$uid === auth.uid"
      }
    }
  }
}

Just replace auth.uid with the uid of the admin you want to be able write to the database.

You can read the documentation here: https://firebase.google.com/docs/database/security/

score 1 · Answer 3 · answered Jun 28 '17 at 12:36

I assume your access rights apply to the entire JSON data and admin is the one who has access to firebase console. So, below rule will work,

{
  "rules": {
    ".read": true,   // (or) ".read": "auth != null"
    ".write": "auth != null && auth.token.isAdmin == true"
  }
}

firebase rules write permission for only one user

3 Answers3