Firestore: "Missing or insufficient permissions" Can you define or retrieve more details on error?

Question

FirebaseError: [code=permission-denied]: Missing or insufficient permissions.

Is there any way to setup the rules so that we can retrieve a more specific error? Such as whether or not they can't read, or write, due to X or Y reason?

Just curious, thanks..

Answer 1

There's no way to find the root cause of the violation. This would be a security problem for your app (it gives attackers a hint on what your protections are like - they should be private). And, for very complicated rules, it would be difficult to express exactly what part of the rule was violated.

If you absolutely need to know, route all your changes through a HTTPS Cloud Function that programmatically checks all the constraints and communicates that back to the caller.