> You can use Firestore Security rules
I think the main problem is that they bolted security (access control) on top of their existing system, rather than make it an integral part of the design.
I think the main problem is that they bolted security (access control) on top of their existing system, rather than make it an integral part of the design.
Two minor notes (one on security rules):
(1) in the tutorials I’ve seen, the security rules have received little attention and the documentation I’ve read is a bit confusing about the spectrum of possibilities for security rules. Tbh, I’ve punted security rules altogether until I’m closer to “beta ready” as opposed to writing them along the way. I suspect this is bad practice but haven’t found a better way. Much of this is my fault lol.
(2) “presence” systems still require the use of Real-Time DB. +1 feature request to support user connect/disconnect events in Firestore.
And yes, also agreed on needing a solution for presence system, either in Firestore itself, or separate from it.