How to check if attribute matches in an array of maps

Question

Previously, I had the following rule:

 allow read: if request.auth.token.email in resource.data.shareWith;

Now, that the data structure changed and shareWith is no longer an array of email addresses, but an array of maps, how can I adapt this rule accordingly?

This is how the DB looks like now:

shareWith: [ { email, phone }, { email, phone }, ... ]

Frank van Puffelen · Accepted Answer · 2025-07-31 13:12:22Z

1

Checking whether an item is in an array in Firestore (both its query API and its security rules) requires that you specify the full item. There is no way to check for a partial match.

The common workaround is to add an additional array field to each document with just the values that you want to check/query for. So in your case, that'd be:

shareWithEmails: ["email1", "email2"]

And then your security rule would be:

allow read: if request.auth.token.email in resource.data.shareWithEmails;

Also see:

How to use array-contains operator with an array of objects in Firestore? (about queries in code, but the same applies there)

edited Jul 31 at 13:12

answered Jul 31 at 12:58

Frank van Puffelen

603k85 gold badges895 silver badges868 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

Simon Ferndriger Aug 1 at 13:05

Thanks! By the way, is it correct, that it you only have the email address of the user available (for the rules) if someone logs in via Google account, but NOT his mobile phone number?

Frank van Puffelen Aug 1 at 17:22

The information comes from the auth provider, and I indeed would not expected the phone number provider to have/provider an email address. As a workaround you can ask the user for their email, and then add it to their account.

Collectives™ on Stack Overflow

How to check if attribute matches in an array of maps

1 Answer 1

2 Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

2 Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related