Firestore 设置新规则后缺少或权限不足

Question

我编写了一些与默认规则完美配合的代码。代码是这样的：

function listenerNewMessages(chats) {

        chats.forEach(function(item) {

            db.collection("pm").doc(chats[0]).collection('messaggi')
            .onSnapshot(function(snapshot) {
                snapshot.docChanges().forEach(function(change) {
                    if (change.type === "added" && change.doc.data().idUser != idUser && (String(Date.now()) > change.doc.id  && dateChat < change.doc.id) && idChat != item) {

                        //alert('hai ricevuto un nuovo messaggio in '+ item)
                        $('#contact-'+item).removeClass('flash')

                        setTimeout(function(){
                            $('#contact-'+item).addClass('flash')
                        }, 50);
                    }
                })

            })
        })
    }

但是如果我使用这些规则

service cloud.firestore {
  match /databases/{database}/documents {
    match /pm/{pm} {
      allow read, write: if request.auth.uid == resource.data.partecipanti.partecipante1 || request.auth.uid == resource.data.partecipanti.partecipante2;
    }

  }
}

我明白了

Uncaught Error in onSnapshot: Error: Missing or insufficient permissions.

我做错了什么？

Answer 1

您需要为新写入添加 request.resource 限定符。

allow read, write: if request.auth.uid == request.resource.data.some-property-A || request.auth.uid == resource.data.some-property-A;

allow read, write: if request.auth.uid == request.resource.data.some-property-B || request.auth.uid == resource.data.some-property-B;