firestore.rules

service cloud.firestore {
  match /databases/{database}/documents {
    match /events/{event} {
      allow read: if request.auth.uid != null;
      allow write: if exists(/databases/$(database)/documents/admins/$(request.auth.uid));
    }

    match /event_series/{event} {
      allow read: if request.auth.uid != null;
      allow write: if exists(/databases/$(database)/documents/admins/$(request.auth.uid));
    }

    match /events/{event}/people/{userId} {
      allow write: if request.auth.uid == userId;
      allow write: if exists(/databases/$(database)/documents/admins/$(request.auth.uid));
      allow read: if request.auth.uid != null;
    }
    match /admins/{admin} {
      allow read: if request.auth.uid != null;
      allow write: if exists(/databases/$(database)/documents/admins/$(request.auth.uid));
    }
    match /users/{userId} {
      allow read: if request.auth.uid != null;
      allow update, delete: if request.auth.uid == userId;
      allow write: if exists(/databases/$(database)/documents/admins/$(request.auth.uid));
      allow create: if request.auth.uid != null;
    }
  }
}