firestore.rules

rules_version = '2';
service cloud.firestore {
  match /databases/{database}/documents {
    match /abyssal-expedition/{userId} {
      allow read;
      allow write: if request.auth.uid == userId;
    }
    match /heroes/{userId} {
      allow read;
      allow write: if request.auth.uid == userId;
    }
    match /priority-list/{document=**} {
      allow read;
      allow create: if request.auth != null;
      allow update: if request.auth.uid == resource.data.ownerId;
      allow delete: if request.auth.uid == resource.data.ownerId;
    }
    match /tree-list/{document=**} {
      allow read;
      allow create: if request.auth != null;
      allow update: if request.auth.uid == resource.data.ownerId;
      allow delete: if request.auth.uid == resource.data.ownerId;
    }
    match /pet-list/{document=**} {
      allow read;
      allow create: if request.auth != null;
      allow update: if request.auth.uid == resource.data.ownerId;
      allow delete: if request.auth.uid == resource.data.ownerId;
    }
    match /guild/{document=**} {
      allow read;
      allow create: if request.auth != null;
      allow update: if request.auth.uid == resource.data.ownerId;
      allow delete: if request.auth.uid == resource.data.ownerId;
      
      match /{guildId}  {
      	allow update: if (
        	request.auth != null &&
          request.resource.data.diff(resource.data).affectedKeys().hasOnly(['applications'])
        ) ||
        request.auth.uid == resource.data.ownerId ||
        request.auth.uid in resource.data.deputies || (
        	request.auth.uid in resource.data.members &&
          !(request.auth.uid in request.resource.data.members) &&
        	resource.data.members.size() == request.resource.data.members.size() + 1
        );
      }
    }
  	match /profile/{userId} {
    	allow write: if request.auth.uid == userId;
    	allow read: if request.auth != null;
    }
    
    // Legacy API
    match /campaign/{userId} {
    	allow write: if request.auth.uid == userId;
      allow read: if request.auth.uid == userId;
    }
  	match /fast-reward/{userId} {
    	allow write: if request.auth.uid == userId;
      allow read: if request.auth.uid == userId;
    }
  	match /hero-list/{userId} {
    	allow write: if request.auth.uid == userId;
      allow create: if request.auth != null
      allow read: if true;
    }
  	match /abex/{userId} {
    	allow write: if request.auth.uid == userId;
      allow create: if request.auth != null;
      allow read: if request.auth.uid == userId;
    }
  	match /user/{userId} {
    	allow write: if request.auth.uid == userId;
      allow read: if true;
      
      match /favorite/{favoriteType} {
        allow write: if request.auth.uid == userId;
        allow read: if request.auth.uid == userId;
      }
      match /priority-list/{listId} {
        allow write: if request.auth.uid == userId;
        allow read: if true;
      }
    }
  }
}