Link to home
Start Free TrialLog in
Avatar of Zack
ZackFlag for Canada

asked on

Is it good enough to secure a Google Firebase with this rule?

Hi Everyone - Is this rule good enough to secure a private internal Android app I'm developing?
rules_version = '2';
service cloud.firestore {
  match /databases/{database}/documents {
    match /{document=**} {
      allow read, write: if request.auth != null;
    }
  }
}

Open in new window

Thanks for your help!
Zack
Avatar of Andrew Porter
Andrew Porter
Flag of United States of America image

Good enough, for who? :)
Avatar of Zack

ASKER

Haha I guess I should've specified.  I just don't want my database being scraped into the Google search engine because I didn't secure it, or you know other bad actors hacking it. :)
ASKER CERTIFIED SOLUTION
Avatar of Andrew Porter
Andrew Porter
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Zack

ASKER

Thanks for the insight.  I will have to do some more research.  I don't see the 'simulator' in the firebase console, all I see from the Firestore database -> Rules -> is Edit Rules and Monitor Rules on the right side Develop and Test.  From that menu it just gives me options for Emulator Suite in Google Cloud Shell and Emulator Suite on your local machine.  Am I in the wrong spot?

I really appreciate your help andeporter!  I'm still new at this Firestore stuff.

Thanks - Zack