firestore.rules

rules_version = '2';
service cloud.firestore {
  match /databases/{database}/documents {
    
    // Helper function to check if user is authenticated
    function isAuthenticated() {
      return request.auth != null;
    }

    // Helper function to check if user is accessing their own data
    function isOwner(userId) {
      return isAuthenticated() && request.auth.uid == userId;
    }

    match /users/{userId} {
      // Allow users to read and write their own profile
      allow read, write: if isOwner(userId);
    }

    match /downloads/{downloadId} {
      allow read: if isAuthenticated() && resource.data.userId == request.auth.uid;
      allow create: if isAuthenticated() && request.resource.data.userId == request.auth.uid;
      allow update, delete: if isAuthenticated() && resource.data.userId == request.auth.uid;
    }

    match /blog_posts/{slug} {
      allow read: if true;
      allow write: if isAuthenticated() && request.auth.token.email == "rikiruswandi28@gmail.com";
    }

    match /settings/{docId} {
      allow read, write: if isAuthenticated() && request.auth.token.email == "rikiruswandi28@gmail.com";
    }
  }
}