// Firebase Storage Rules rules_version = '2'; service firebase.storage { match /b/{bucket}/o { match /pdfs/{allPaths=**} { allow read: if request.auth != null; allow write: if request.auth != null && request.auth.token.email == 'marcosinfoprodutor@gmail.com'; } } }

rules_version = '2'; service cloud.firestore { match /databases/{database}/documents { function isAdmin() { return request.auth != null && request.auth.token.email == 'marcosinfoprodutor@gmail.com'; } function canEdit() { return isAdmin() || ( request.auth != null && get(/databases/$(database)/documents/allowed_users/$(request.auth.uid)).data.role in ['admin','editor'] ); } match /allowed_users/{uid} { allow read: if request.auth != null && request.auth.uid == uid; allow read, write: if isAdmin(); } match /exams/{examId} { allow read: if request.auth != null; allow write: if canEdit(); } match /config/{docId} { allow read: if request.auth != null; allow write: if canEdit(); } match /finance_assets/{docId} { allow read: if request.auth != null; allow write: if canEdit(); } match /finance_snapshots/{docId} { allow read: if request.auth != null; allow write: if canEdit(); } match /login_logs/{uid} { allow read: if isAdmin(); allow write: if request.auth != null && request.auth.uid == uid; } } }