Allow admins to see private-users info

manifoldmarkets · Jan 24, 2022 · e7ef613 · e7ef613
1 parent 9806411
commit e7ef613
Show file tree

Hide file tree

Showing 3 changed files with 15 additions and 3 deletions.
diff --git a/.firebaserc b/.firebaserc
@@ -4,4 +4,4 @@
     "prod": "mantic-markets",
     "dev": "dev-mantic-markets"
   }
-}
+}
diff --git a/firebase.json b/firebase.json
@@ -1,6 +1,10 @@
 {
   "functions": {
     "predeploy": "npm --prefix \"$RESOURCE_DIR\" run build",
-    "runtime": "nodejs12"
+    "runtime": "nodejs12",
+    "source": "functions"
+  },
+  "firestore": {
+    "rules": "firestore.rules"
   }
 }
diff --git a/firestore.rules b/firestore.rules
@@ -1,14 +1,22 @@
 rules_version = '2';
 
+// To deploy: `firebase deploy --only firestore:rules`
 service cloud.firestore {
   match /databases/{database}/documents {
 
+    function isAdmin() {
+      return request.auth.uid == 'igi2zGXsfxYPgB0DJTXVJVmwCOr2' // Austin
+        || request.auth.uid == '5LZ4LgYuySdL1huCWe7bti02ghx2' // James
+        || request.auth.uid == 'tlmGNz9kjXc2EteizMORes4qvWl2' // Stephen
+        || request.auth.uid == 'IPTOzEqrpkWmEzh6hwvAyY9PqFb2' // Manifold
+    }
+
     match /users/{userId} {
       allow read;
     }
 
     match /private-users/{userId} {
-      allow read: if resource.data.creatorId == request.auth.uid;
+      allow read: if resource.data.creatorId == request.auth.uid || isAdmin();
     }
 
     match /contracts/{contractId} {
-Original file line number
+Diff line change
@@ Expand Up / @@ -4,4 +4,4 @@ @@
         "prod": "mantic-markets",
         "dev": "dev-mantic-markets"
       }
-    }
+    }