firestore.rules

rules_version = '2';
service cloud.firestore {
  match /databases/{database}/documents {

    // by default disallow
    match /{document=**} {
      allow read, write: if false;
    }

    match /User/{userId}/{document=**} {
      allow read, write: if request.auth != null;
    }

    match /Game/{gameId}/{document=**} {
      allow read: if request.auth != null;
      allow write: if request.auth != null;
    }
    
    //chat
    match /messages/{docId} {
 			allow read: if request.auth.uid != null;
      allow create: if canCreateMessage();
    }
    
    function canCreateMessage() {
      let isSignedIn = request.auth.uid != null;
      let isOwner = request.auth.uid == request.resource.data.uid;
      let isNotLong = request.resource.data.text.size() < 255;
      let isNow = request.time == request.resource.data.createdAt;
      let isNotBanned = /User/$(request.auth.uid)/isChatBanned == false;
      
      return isSignedIn && isOwner && isNotLong && isNow && isNotBanned;
    }
    
  }
}