firestore rules posted - still receiving emails from google

user_15550130 0
Viewed 47

I have received an email from Google about not having implemented rules for a database. Checked - had generally read&write open. Changed to read&write only for authorized users. Created a user with pwd but received another email from Google about not having implemented the rules... Can someone tell me what could be done with this?

My current Firebase Rules:

rules_version = '2'; 
service cloud.firestore { 
    match /databases/{database}/documents { 
        match /{document=**} { 
            allow read, write: if (request.time < timestamp.date(2021, 4, 19)) && (request.auth.uid != null); 
        } 
    } 
}
google-cloud-firestore rules
1 Answers

If the emails arrived closely or if the second email arrived close to you changing the Firebase Rules might mean that google has not detected that you changed your Firebase Rules or that this information was not yet replicated into all their systems before the trigger to send a new email to you was activated.

So I would say you could simply ignore that email as your rules are allowing authenticated users only, which is enough for be considered secure for an initial state.

user_128577030
Related