firestore.rules

service cloud.firestore {
  match /databases/{database}/documents {

    match /users/{userId} {
      allow read, write: if request.auth.uid == userId;
    }

    match /receiptsByUser/{userId}/receipts/{receiptId} {
      allow read, write: if request.auth.uid == userId;
    }

    match /recurringPaymentsByUser/{userId}/recurringPayments/{id} {
      allow read, write: if request.auth.uid == userId;
    }

    match /rulesByUser/{userId}/rules/{id} {
      allow read, write: if request.auth.uid == userId;
    }

    match /dashboardsByUser/{userId}/dashboards/{id} {
      allow read, write: if request.auth.uid == userId;
    }

    match /testData/{id} {
      allow read, write: if "contributor" in get(/databases/$(database)/documents/auth/$(request.auth.uid)).data.roles;
    }
  }
}