database.rules.json

{
  "rules": {
    "reviewStates": {
      "$prid": {
        "$uid": {
          ".read": "$uid === auth.uid",
          ".write": "$uid === auth.uid"
        }
      }
    }
  }
}