firestore.rules

rules_version = '2';
service cloud.firestore {
  match /databases/{database}/documents/events {
    match /{document=**} {
      allow read: if true;
      allow write: if false;

      match /tickets/{ticket} {
      	allow read: if true;
        // allow write: if request.auth != null && request.auth.uid == resource.data.seller_id;
        allow write: if true;
      }
    }
  }

  match /databases/{database}/documents/stripes {
    match /{document=**} {
      allow read, write: if false;
    }
  }

  match /databases/{database}/documents/transactions {
    match /{document=**} {
      allow read, write: if false;
    }
  }

  match /databases/{database}/documents/users {
    match /{userID} {
      allow read: if request.auth.uid == userID;
      allow write: if false;
    }
  }

  match /databases/{database}/documents/aids {
    match /{document=**} {
      allow read, write: if false;
    }
  }
  // match /databases/{database}/documents/events/{event}/tickets {
  //   match /{document=**} {
  //     allow write: if event.expiry > request.time;
  //     allow read: if true;
  //   }
  // }
}