firebase.rules

service cloud.firestore {
  match /databases/{database}/documents {

    function userHasAddress(address) {
      return get(/databases/$(database)/documents/users/$(request.auth.uid)).data.wallets.ETH.testnet.address.toLowerCase() == address || get(/databases/$(database)/documents/users/$(request.auth.uid)).data.wallets.ETH.mainnet.address.toLowerCase() == address;
    }

    // users
    match /users/{user_id} {
      allow read: if request.auth.uid != null;
      allow write: if request.auth.uid == user_id || request.auth.uid == "chain";
      allow delete: if request.auth.uid == user_id || request.auth.uid == "chain";
    }


    // transactions
    match /transactions/{transaction_id} {
      allow read: if request.auth.uid != null;
      allow write: if request.auth.uid == request.resource.data.fromId || request.auth.uid == request.resource.data.toId || request.auth.uid == resource.data.fromId || request.auth.uid == resource.data.toId;
      allow delete: if request.auth.uid == resource.data.fromId || request.auth.uid == resource.data.toId;
    }

  }
}