Andrey Solera
Reputation: 2402
Firestore security rules for server side code
According to what I've read, when a function runs via the server, all Firestore rules are ignored. How can I avoid this behavior?
Upvotes: 0
Views: 323
Answers (1)
Frank van Puffelen
Reputation: 598765
Cloud Functions use the Admin SDK to access Firestore, which runs with administrative privileges and always bypasses security rules. There is (currently) no way to change this behavior.
Also see:
- How to use Admin SDK with limited privileges on Firestore?, which shows an interesting workaround.
- Firebase firstore security rules for cloud functions
- How to make Firebase Functions act as a user instead of being an admin?
Upvotes: 5
Related Questions
- Why are Cloud Functions not stopped from writing when using Security rules in Firestore?
- Can cloud functions bypass firestore security rules
- Declaring a function in Firestore rules
- security rules for cloud function
- Firebase Firestore server side rules - problems
- Firebase firstore security rules for cloud functions
- Firestore rules to Read, Update and Delete
- How do I account for Google Cloud Firestore security rules in Firebase Functions?
- Firestore Security Rules for this scenario
- Reading and writing in firestore only through cloud functions