firestore.rules

service cloud.firestore {
  match /databases/{database}/documents {
    match /{document=**} {
      allow read, write: if false;
    }
    match /users/{uid} {
      allow write: if request.resource.data.keys().hasOnly(['email']) || 
      request.resource.data.firstName is string
      && request.resource.data.lastName is string
      && request.auth.uid == uid ||
      request.resource.data.pushTokenWeb is string
      && request.auth.uid == uid;
      allow update: if request.resource.data.firstName is string
      && request.resource.data.lastName is string
      && request.auth.uid == uid ||
      request.resource.data.pushTokenWeb is string
      && request.auth.uid == uid;
      allow read: if request.auth.uid == uid;
    }
  }
}