firebase.rules

rules_version = '2';
service cloud.firestore {
  match /databases/{database}/documents {
    
    match /users/{userId} {
      // Allow authenticated users to read any user's data
      allow read: if request.auth != null;
      
      // Allow authenticated users to write only their own data
      allow write: if request.auth != null && request.auth.uid == userId;
    }
    
    match /challenges/{challengeId} {
      // Allow authenticated users to read/write challenges
      allow read: if request.auth != null;
      allow write: if request.auth != null;

      match /messages/{messageId} {
        // Allow authenticated users to read messages
        allow read: if request.auth != null;

        // Allow authenticated users to write messages
        allow write: if request.auth != null;
      }

      match /auditorApplications/{applicationId} {
        // Allow authenticated users to write auditor applications
        allow write: if request.auth != null;
      }
    }
    
    match /notifications/{notificationId} {
      // Allow authenticated users to read notifications
      allow read: if request.auth != null;

      // Allow only the owner to write notifications
      allow write: if request.auth != null && request.auth.uid == resource.data.owner;
    }
  }
}