firestore.rules

rules_version = '2';
service cloud.firestore {
  match /databases/{database}/documents {

    match /images/{Id} {
      allow read: if true;
      allow write: if request.auth.uid != null;
    }

    match /navigation/{Id} {
      allow read: if true;
      allow write: if request.auth.token.superuser || request.auth.token.admin || request.auth.token.editor;
    }

     match /pages/{Id} {
      allow read: if true;
      allow write: if request.auth.token.superuser || request.auth.token.admin || request.auth.token.editor;
    }

     match /posts/{Id} {
      allow read;
      allow write: if request.auth.token.superuser || request.auth.token.admin || request.auth.token.blogger;
    }

     match /users/{Id} {
      allow read: if true;
      allow write: if request.auth.uid != null;
    }

    match /users-security/{Id} {
      allow read;
      allow create: if request.auth.uid == Id;
      allow update: if request.auth.token.superuser;
    }

  }

}