Firestore: create hidden data when creating new document

Question

I'm adding a new document every time a user is logged in with Google authentication and that user does not exist in firestore.

What I want is to add a 'USER' role when creating this new USER. I was expecting to do this outside the react application so it can not be hacked into creating different types of users by calling the Firestore api.

At first I thought of a function but now they are only allowed by having a paid plan.

Thanks in advance for the help.

Renaud Tarnec · Answer 1 · 2022-05-05T08:25:00.010

2

If you want to implement a role-based access control to your Firestore database, the recommended approach is to use Custom Claims. This indeed requires using the Admin SDK via Cloud Functions or a server you own.

Activating Cloud Functions indeed requires entering the details of a credit card but there is a free tier which allows up to 2M invocations/month for free. So, unless your app is very popular, you'll be only billed for each container required to deploy a function but this is a negligible cost of few tenths of $.

If you don't have any credit card, there is another solution: using some Firestore documents to declare the users roles, as explained here in the doc.

edited May 05 '22 at 08:25

answered May 05 '22 at 06:19

Renaud Tarnec

79,263
10
95
121

1

Hey @AlanAlbertengo, did you have the opportunity to look at the proposed solution? – Renaud Tarnec May 09 '22 at 12:22
yes, sorry, I have been working in other stuff, i was able to implement the user role declaration using Firestore documents. Thanks for your response! – Alan Albertengo Jun 06 '22 at 19:47
Glad I could help you! You may accept my answer if it solved your problem. Thanks – Renaud Tarnec Jun 06 '22 at 20:32

score 1 · Answer 2 · answered May 05 '22 at 06:51

1

I wanted to add this as a comment but I guess you could make use of the firestore rules to make sure that the role value sent by the client is always set to user and not anything else or you could make sure that this USER role added it a boolean value and in the rules make sure he can only edit his own document this way he won't be able to change his role even if he set it to false it won't give him a different role

answered May 05 '22 at 06:51

Bahaeldin0

63
8

Thanks! I think that creating a new collection and only allowing this to be changed by the admin will work. – Alan Albertengo May 05 '22 at 23:38
Your answer could be improved with additional supporting information. Please [edit] to add further details, such as citations or documentation, so that others can confirm that your answer is correct. You can find more information on how to write good answers [in the help center](/help/how-to-answer). – Community May 10 '22 at 03:27

Firestore: create hidden data when creating new document

2 Answers2