Firestore的Firebase安全规则引发错误。where（）快照

Question

获取错误：

OnSnapshot中未捕获的错误：FirebaseError：权限缺失或不足。

下面是正在调用的函数：

let unsubscribeUserThings
export function getUserThings(user, state) {
    unsubscribeUserThings = firebaseDB.collection("things").where("user", "==", user)
        .onSnapshot(function(querySnapshot) {
            var things = {}
            querySnapshot.forEach(function(doc) {
                things[doc.id] = doc.data()
            })

            state.setState({
                things: things
            })
        })

}
export function stopListeningToUserThings() {
    // Stop listening to changes
    unsubscribeUserThings()
}

Firebase安全规则如下：

service cloud.firestore {
  match /databases/{database}/documents {

    // FUNCTIONS

      // True if the signed in user is the thing's user
      function isThingUser() {
        return request.auth != null && request.auth.uid != null && resource.data.user == request.auth.uid
      }

      // True if the signed in user is the thing's owner
      function isThingOwner() {
        return request.auth != null && request.auth.uid != null && resource.data.owner == request.auth.uid
      }

    // RULES

      // Things
      match /things/{thingID} {
        allow create: if true
        allow read, update: if isThingUser() || isThingOwner()
      }
  }
}

奇怪的是，它仍然正确地显示一切，只是触发了这个错误。为什么会这样？我忽略了吗？

Answer 1

Firebase规则一切都很好--它最终被一个不同的onSnapshot调用拉出来，以监听“thing”文档的子集合，子集合“parts”。添加了一个嵌套的match语句，以授予它读取/things/{thingID}/parts/{partID}的权限，现在一切都在工作！

service cloud.firestore {
  match /databases/{database}/documents {

    // FUNCTIONS

      // True if the signed in user is the thing's user
      function isThingUser() {
        return request.auth != null && request.auth.uid != null && resource.data.user == request.auth.uid
      }

      // True if the signed in user is the thing's owner
      function isThingOwner() {
        return request.auth != null && request.auth.uid != null && resource.data.owner == request.auth.uid
      }

  // RULES

    // Things
    match /things/{thingID} {
      allow create: if true
      allow read, update: if isThingUser() || isThingOwner()

      match /parts/{partID} {
        allow read, write: if true
      }
    }
  }
}