rules_version = '2'; service cloud.firestore { match /databases/{database}/documents { // Allow authenticated users to read and write their own data match /users/{userId} { allow read, write: if request.auth != null && request.auth.uid == userId; } // Allow public read/write for development (less secure) match /{document=**} { allow read, write: if true; } } }