Mastering Firebase for Android Development

Securing user files

Firebase made it all clear: storage works on a declarative path-based security model, Firebase security rules. Firebase security rules are the most efficient and straightforward approach to secure files. As previously outlined, we have explored the general syntax and the flexibility of working with rules. It is important to make sure files that are private to a user are not accessible by other users. 

Firebase security rules are essentially used to determine who has read and write access to files in storage. It also explains how files and their metadata are structured:

// If no condition is given, the rule evaluates to trueallow read;// Rules can specify a conditionallow write: if <condition>;// Rules can specify multiple ...