How to make firebase Realtime database user's private node?

Question

I'm the Android app developer, and I'm using Firebase Realtime Database. I want to make an app that when users who want to use my app can save something like the text in their repository. But when I save the text in my app, other users who download my app can see my unique saved text. Firebase Realtime Database rules like this. But they didn't work. Please tell me how to use private node in Realtime Database.

{
  "rules": {
    "messages": {
      "$user" : {
        ".read" : "$user === auth.uid",
        ".write" : "$user === auth.uid"
      }
    }

  }
}

enter image description here

Updated my answer, could help you – Gaurav Mall Aug 26 '19 at 21:05 — Gaurav Mall, Aug 26 '19 at 21:05

Gaurav Mall · Answer 1 · 2019-08-26T21:05:27.883

0

You also need to check if the auth rules are null. If yes, then not allow anyone to access the information. Also, you need to use a wildcard, instead of a static $uid value. So, put this inside the messages node. So, as you want people to write in the messages node, but only those who are owners to see the message, this is the code for it:

{
  "rules": {
    "messages": {
       "${uid}": {
         ".read": "auth.uid != null",
         ".write": "auth.uid != null && auth.uid == uid"
       }  
    }
  }
}

edited Aug 26 '19 at 21:05

answered Aug 26 '19 at 06:21

Gaurav Mall

2,372
1
17
33

Thank you for your answer. I did it, but the error message like this..."Unknown variable 'user'," – H.JiMan Aug 26 '19 at 07:17
Can you please post your database structure? Take a snapshot and paste it on your question. – Gaurav Mall Aug 26 '19 at 07:50

score 0 · Answer 2 · edited Mar 31 '20 at 12:37

I think the rules below do the trick. The codes snippet:auth.uid == $uid makes sure that only the owner of the node has writing rights while auth != null makes sure that only users logged in to your app can read from it.

{
  "rules": {
    "messages": {
      "$uid" : {
        ".read" : "auth != null",
        ".write" : "auth.uid == $uid"
      }
    }
  }
}

Another StackOverflow Question may also be useful for you if the situation becomes a little more complex.

How to make firebase Realtime database user's private node?

2 Answers2