firestore.rules

rules_version = '2';
service cloud.firestore {
  match /databases/{database}/documents {
  	function isAdmin() {
    	return request.auth != null && request.auth.uid != null && request.auth.uid in get(/databases/$(database)/documents/admin/admins).data.users;
    }

    function isTeamUser() {
      return request.auth != null && request.auth.uid != null;
    }
    
    match /admin/{document} {
    	allow read: if isTeamUser();
      allow write: if isAdmin();
    }
    
    match /users/{document} {
    	allow read: if true;
      allow write: if document == request.auth.uid;
    }
    
    match /games/{document} {
    	allow read, write: if true;
    }
    
    match /{collection}/{document=**} {
      allow read, write: if (collection != "admin" && collection != "users" && collection != "games") && (isTeamUser() || isAdmin());
    }
  }
}