firestore.rules

rules_version = '2';
service cloud.firestore {
  match /databases/{database}/documents {
    match /articles/{articleId} {
      allow read: if resource.data.isPublic == true || request.auth.uid == resource.data.uid;
      allow create: if request.auth.uid == request.resource.data.uid;
      allow update: if request.auth.uid == resource.data.uid && request.resource.data.uid == resource.data.uid;
      allow delete: if request.auth.uid == resource.data.uid;
      match /comments/{commentId} {
        allow read: if true;
        allow create: if request.auth.uid == request.resource.data.uid;
        allow update: if request.auth.uid == resource.data.uid && request.resource.data.uid == resource.data.uid;
        allow delete: if request.auth.uid == resource.data.uid;
      }
    }
    match /users/{userId} {
      allow read: if true;
      allow create: if request.auth.uid == request.resource.data.uid;
      allow update: if request.auth.uid == resource.data.uid && request.resource.data.uid == resource.data.uid;
      allow delete: if request.auth.uid == resource.data.uid;
      match /likedArticles/{articleId} {
        allow read: if true;
        allow write: if request.auth.uid == userId;
      }
    }
  }
}