diff --git a/packages/backend/storage.rules b/packages/backend/storage.rules
index 230c7474..49eb0100 100644
--- a/packages/backend/storage.rules
+++ b/packages/backend/storage.rules
@@ -1,9 +1,9 @@
 rules_version = '2';
 service firebase.storage {
   match /b/{bucket}/o {
-    match /attachments/{id} {
-      allow get;
-      allow create: if request.auth != null && request.resource.contentType != null && request.resource.size < 10 * 1024 * 1024 && resource == null;
+    match /{allPaths=**} {
+      // All access through admin SDK via APIs
+      allow read, write: if false;
     }
   }
 }