katowulf

// docs/{docId}/users is an array of user ids allowed to access the doc

match /docs/{docId} {
  allow read if request.auth.uid in getData('docs/$(docId)').users;
}

/**
 * Shortcut to simplify pathing
 */
function getPath(childPath) {

dinvlad

{% set PROJECT = env['project'] %}
{% set REGION = properties['region'] | default('us-east1') %}

{% set PARENT = 'projects/' + PROJECT + '/locations/' + REGION %}

{% set PREFIX = env['deployment'] %}

{% set CLOUDRUN_TYPE_PROVIDER = PREFIX + '-provider' %}
{% set CLOUDRUN_SERVICE_TYPE = PROJECT + '/' + CLOUDRUN_TYPE_PROVIDER + ':projects.locations.services' %}