Disabling all access to Firebase storage; all data now routes through…

… the admin SDK via API endpoints
andymatuschak · Apr 18, 2024 · 889fc74 · 889fc74
1 parent 7d368c8
commit 889fc74
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/packages/backend/storage.rules b/packages/backend/storage.rules
@@ -1,9 +1,9 @@
 rules_version = '2';
 service firebase.storage {
   match /b/{bucket}/o {
-    match /attachments/{id} {
-      allow get;
-      allow create: if request.auth != null && request.resource.contentType != null && request.resource.size < 10 * 1024 * 1024 && resource == null;
+    match /{allPaths=**} {
+      // All access through admin SDK via APIs
+      allow read, write: if false;
     }
   }
 }