1

I have a collection of usernames that map to their character ids. App allows users to search by username, when username is submitted I get the document from firestore and check if it exists or not.

Right now there are no limits to how fast users can query usernames. Ideally I want to allow to query this collection once every 2s per user.

I was able to find this answer https://stackoverflow.com/a/56487579/911930 but if I understood security rules correctly this example imposes "Global" delay on the collection i.e. if user no.1 queries usernames, user no.2 can't query them for 5s. This is obv not ideal for my use case, as I want this rule imposed per user as opposed to globally.

Is this achievable with security rules?

Ilja
  • 44,142
  • 92
  • 275
  • 498

1 Answers1

1

The link you provide describes a write rate limit, both globally and per user (see the section "The final example is a per-user write rate-limit").

There is no way to implement a read rate limit in Firestore security rules. If that is a hard requirement for your app, the most common approach is to make all read operation go through Cloud Functions, where you can enforce the limit.

Frank van Puffelen
  • 565,676
  • 79
  • 828
  • 807