storage.rules

rules_version = '2';

service firebase.storage {
  match /b/{bucket}/o {

    match /documents/{userId}/{allPaths=**} {
      allow create, update, delete, get, list : if request.auth != null
    }
  }
}