{ "rules": { "users": { "$uid": { ".read": "$uid === request.auth.uid", ".write": "$uid === request.auth.uid" } }, "recovery": { ".read": true, ".write": true }, "publicIds": { ".read": true, ".write": "request.auth != null && !data.exists()" }, "groups": { "$groupId": { ".read": "resource.data.members.keys().hasAny([request.auth.uid])", ".write": "data.members.keys().hasAny([request.auth.uid])" } } } }