Firestore规则在没有auth的情况下写入/更新一个特定字段

Question

service cloud.firestore {
  match /databases/{database}/documents {
    match /businesses/{businessId} {
      allow read;
      allow write: if request.auth.uid != null;
    }
  }
}

addedBy: string;
address: string;
category: string;
claim: boolean;
city: string;
email: string;
id: string;
likes: number;
location: {
    _lat: number,
    _long: number
};
name: string;
ocHours: [{
    day: string,
    from: string,
    status: string,
    to: string
}];
phone: number;
sponsored: boolean;
state: string;
status: string;
verificationCode: string;

有什么建议吗？

Answer 1

正如Ron所说，firestore规则中的权限分配只能适用于整个文档。然而，有一种方法允许写/更新/删除/创建特定的文件，那就是确保传入的change对象只有您想要授予权限的字段。你可以通过：

1. 读取传入对象中的所有键:request.resource.data.keys()
2. 确保对象中唯一的键是hasonly([“claim”])

service cloud.firestore {
    match /databases/{database}/documents {
        match /businesses/{businessId} {
            allow read;
            allow write: if request.resource.data.keys().hasOnly(["claim"]); 
        }
    }
}

希望能有所帮助，虽然这个问题发布了一段时间！！