无法将Request.Auth.id与Firestore规则中的文档id匹配

Question

我正在用Flutter开发一个应用程序。我在Firestore上有一个结构为：users/(UserID)/collection/document的数据库，这里UserID是创建（UserID）文档的用户的唯一uid。代码用于获取用户的uid is

user.uid;

其中user是FireBaseUser的实例。我试图设置这样的规则，即只有当request.auth.uid与（UserID）文档id匹配时，只有用户才能读/写。

service cloud.firestore {
  match /databases/{database}/documents {
    match /Users/{documentID} {
      allow read, write: if isOwner(documentID);
    }

    function isOwner(documentID){
        return request.auth.uid == documentID;
    }
  }
}

class EmployeeList extends StatefulWidget {
  static bool isMale;
  final String userId;
  EmployeeList([this.userId]);
  void setIsMale(bool gen) {
    isMale = gen;
  }

  bool get getIsMale => isMale;

  @override
  State<StatefulWidget> createState() => _EmployeeList();
}

class _EmployeeList extends State<EmployeeList> {
  String employeeName;

  final TextEditingController textEditingController = 
TextEditingController();
  String gender;
  int keyIndex;
  CollectionReference listColRef;
  bool firstTime;
  Firestore db = Firestore.instance;

  @override
  void initState() {
    gender = EmployeeList().getIsMale ? "Male" : "Female";
    listColRef = 
db.collection('Users').document(widget.userId).collection('EmployeeList');
    print(widget.userId);
    super.initState();
  }

 @override
 Widget build(BuildContext context) {
   return Scaffold(
      backgroundColor: Colors.grey[100],
      appBar: AppBar(
         title: Text('Employees'),
      ),
      body: Padding(
        padding: const EdgeInsets.all(5),
        child: StreamBuilder<QuerySnapshot>(
            stream: listColRef.where('Gender', isEqualTo: 
        gender).snapshots(),

这是数据库的结构:https://imgur.com/a/ai6uiko

Answer 1

您的数据库规则与您的查询不匹配。您的查询试图使用模式/users/{userId}/employeeList查找集合下的文档。但是您的规则只允许访问/users/{documentID}下的文档。如果希望允许访问嵌套子集合中的文档，则需要确保整个路径匹配。例如：

match /Users/{userId}/EmployeeList/{id} {
  allow read, write: if isOwner(userId);
}