🐛 fix rules for talks

bpetetot · Jul 15, 2019 · 779df5b · 779df5b
1 parent 5a32ef1
commit 779df5b
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/config/firestore.rules b/config/firestore.rules
@@ -16,7 +16,7 @@ service cloud.firestore {
     	return eventRes.data.owner == request.auth.uid || get(/databases/$(database)/documents/organizations/$(eventRes.data.organization)).data.members[request.auth.uid] == true
     }
     function itsMyMessage(message) { return request.auth.uid == message.data.uid }
- 
+
 		function itsMySurvey() { return request.path[6] == request.auth.uid }
     function hasInviteCode() { return request.resource.id == resource.id }
 
@@ -78,10 +78,10 @@ service cloud.firestore {
 
     // TALKS
     match /talks/{talk} {
-    	allow get: if authenticated(); // invite ?
+    	allow get: if authenticated() && itsMyTalk();
     	allow list: if authenticated() && itsMyTalk();
     	allow create: if authenticated();
-    	allow update: if authenticated() && (itsMyTalk() || hasInviteCode());
+    	allow update: if authenticated() && itsMyTalk();
     	allow delete: if authenticated() && itsMyTalk();
     }
   }