java - Cloud Firestore 安全规则权限

Question

如何将用户信息记录到数据库中并在注册期间启用用户写入数据库的权限。

service cloud.firestore {
match /databases/{database}/documents {
match /Users/{userId} {
  // Anybody can write to their ouser doc
  allow read, write: if request.auth.uid == userId;
    }
  }
}

我无法通过这些限制注册用户，如何设置好的限制以在确认电子邮件后启用日志记录信息？

 register.setOnClickListener(new View.OnClickListener() {
        @Override
        public void onClick(View view) {

         if (imageUri != null) {
          username_ = username.getText().toString();
          name_ = name.getText().toString();
          email_ = email.getText().toString();
          pass_ = password.getText().toString();
          location_ = location.getText().toString();

          mDialog.show();

          if (TextUtils.isEmpty(username_)) {

           AnimationUtil.shakeView(username, RegisterActivity.this);
           mDialog.dismiss();

          }

          if (TextUtils.isEmpty(name_)) {

           AnimationUtil.shakeView(name, RegisterActivity.this);
           mDialog.dismiss();

          }
          if (TextUtils.isEmpty(email_)) {

           AnimationUtil.shakeView(email, RegisterActivity.this);
           mDialog.dismiss();

          }
          if (TextUtils.isEmpty(pass_)) {

           AnimationUtil.shakeView(password, RegisterActivity.this);
           mDialog.dismiss();

          }

          if (TextUtils.isEmpty(location_)) {

           AnimationUtil.shakeView(location, RegisterActivity.this);
           mDialog.dismiss();

          }

          if (!TextUtils.isEmpty(name_) || !TextUtils.isEmpty(email_) ||
           !TextUtils.isEmpty(pass_) || !TextUtils.isEmpty(username_) || !TextUtils.isEmpty(location_)) {

           firebaseFirestore.collection("Usernames")
            .document(username_)
            .get()
            .addOnSuccessListener(new OnSuccessListener < DocumentSnapshot > () {
             @Override
             public void onSuccess(DocumentSnapshot documentSnapshot) {
              if (!documentSnapshot.exists()) {
               registerUser();
              } else {
               Toast.makeText(RegisterActivity.this, "Username already exists", Toast.LENGTH_SHORT).show();
               AnimationUtil.shakeView(username, RegisterActivity.this);
               mDialog.dismiss();
              }
             }
            })
            .addOnFailureListener(new OnFailureListener() {
             @Override
             public void onFailure(@NonNull Exception e) {
              Log.e("Error", e.getMessage());
             }
            });

          } else {

           AnimationUtil.shakeView(username, RegisterActivity.this);
           AnimationUtil.shakeView(name, RegisterActivity.this);
           AnimationUtil.shakeView(email, RegisterActivity.this);
           AnimationUtil.shakeView(password, RegisterActivity.this);
           AnimationUtil.shakeView(location, RegisterActivity.this);
           mDialog.dismiss();

          }

         } else {
          AnimationUtil.shakeView(profile_image, RegisterActivity.this);
          Toast.makeText(RegisterActivity.this, "We recommend you to set a profile picture", Toast.LENGTH_SHORT).show();
          mDialog.dismiss();
         }

        }
       });


       }

Registering a user

       private void registerUser() {

        mAuth.createUserWithEmailAndPassword(email_, pass_).addOnCompleteListener(new OnCompleteListener < AuthResult > () {
         @Override
         public void onComplete(@NonNull final Task < AuthResult > task) {
          if (task.isSuccessful()) {

           Map < String, Object > usernameMap = new HashMap < String, Object > ();
           usernameMap.put("username", username_);

           firebaseFirestore.collection("Usernames")
            .document(username_)
            .set(usernameMap)
            .addOnSuccessListener(new OnSuccessListener < Void > () {
             @Override
             public void onSuccess(Void aVoid) {
              task.getResult()
               .getUser()
               .sendEmailVerification()
               .addOnSuccessListener(new OnSuccessListener < Void > () {
                @Override
                public void onSuccess(Void aVoid) {

                 final String userUid = task.getResult().getUser().getUid();
                 final StorageReference user_profile = storageReference.child(userUid + ".png");
                 user_profile.putFile(imageUri).addOnCompleteListener(new OnCompleteListener < UploadTask.TaskSnapshot > () {

image upload

                  @Override
                  public void onComplete(@NonNull final Task < UploadTask.TaskSnapshot > task) {
                   if (task.isSuccessful()) {

                    user_profile.getDownloadUrl().addOnSuccessListener(new OnSuccessListener < Uri > () {
                     @Override
                     public void onSuccess(Uri uri) {

                      //noinspection deprecation
                      String token_id = FirebaseInstanceId.getInstance().getToken();

                      Map < String, Object > userMap = new HashMap < > ();
                      userMap.put("id", userUid);
                      userMap.put("name", name_);
                      userMap.put("image", uri.toString());
                      userMap.put("email", email_);
                      userMap.put("bio", getString(R.string.default_bio));
                      userMap.put("username", username_);
                      userMap.put("location", location_);
                      userMap.put("token_id", "");

verification of email

                       @Override
                       public void onSuccess(Void aVoid) {
                        mDialog.dismiss();
                        Toast.makeText(RegisterActivity.this, "Verification email sent", Toast.LENGTH_SHORT).show();
                        finish();
                       }
                      }).addOnFailureListener(new OnFailureListener() {
                       @Override
                       public void onFailure(@NonNull Exception e) {
                        mDialog.dismiss();
                        Toast.makeText(RegisterActivity.this, "Error: " + e.getMessage(), Toast.LENGTH_SHORT).show();
                       }
                      });

                     }
                    }).addOnFailureListener(new OnFailureListener() {
                     @Override
                     public void onFailure(@NonNull Exception e) {
                      mDialog.dismiss();
                     }
                    });


                   } else {
                    mDialog.dismiss();
                   }
                  }
                 });

                }
               })
               .addOnFailureListener(new OnFailureListener() {
                @Override
                public void onFailure(@NonNull Exception e) {
                 task.getResult().getUser().delete();
                }
               });
             }
            })
            .addOnFailureListener(new OnFailureListener() {
             @Override
             public void onFailure(@NonNull Exception e) {
              Log.e("Error", e.getMessage());
             }
            });


          } else {
           mDialog.dismiss();
           Toast.makeText(RegisterActivity.this, "Error: " + task.getException().getMessage(), Toast.LENGTH_SHORT).show();
          }
         }
        });

       }

Answer 1

要解决此问题，请使用以下代码行:

service cloud.firestore {
  match /databases/{database}/documents {
    match /Users/{userId} {
      allow read, update, delete: if request.auth.uid == userId;
      allow create: if request.auth.uid != null;
    }
  }
}

这基本上意味着您可以创建用户文档，如果 request.auth.uid != null并且只有在 request.auth.uid == userId 时才可以读取、更新、删除.

编辑:

你得到了PERMISSION_DENIED警告，因为在尝试写入之前:

firebaseFirestore.collection("Users").document(userUid).set(userMap)

您还尝试将数据写入:

firebaseFirestore.collection("Usernames").document(username_).set(usernameMap)

未经您许可的地方。请在第一次写操作时添加相应的权限就万事大吉了。