CODEWITHSUNDEEP
firebasefirebase-realtime-databasefirebase-authenticationfirebase-security
EagerToSing
EagerToSing

Reputation: 163

Do I need security rules on my Firebase Database?

It is unclear whether or not to set security rules for database.

Is it enough to just let in just authenticated users? Do I need more complicated things? I have android app, and do all validations and updates inside app.

The video from IO says that there is possibility that someone can get all your data if he knew your app ID. So if user is authenticated and have app ID and somehow build web app he can get data too? I mean if using simple rules.

I`m asking for risks when building just android app and using simple rules (auth is on).

Upvotes: 1

Views: 101

Answers (2)

Devid Farinelli
Devid Farinelli

Reputation: 7544

Is it ok for you if any user could edit/create/delete any data in your Firebase database? If this is not ok, you need security rules (you probably need them)

Firebase's security rules are really powerful and easy to use, I suggest you take a look at the documentation.

Upvotes: 1

Mohamed
Mohamed

Reputation: 1271

You need user id or role specific rules, otherwise somebody for example can easily wipe out your all data, or easily manipulate anything.

Upvotes: 0

Related Questions