database.rules.json

{
  "rules": {
    "site": {
      ".read": true,
      ".write": false
    },
    "ConceptExerciseMap": {
      ".read": "auth != null",
      ".write": "auth != null && root.child('Users').child(auth.uid).child('permission').val() === 'author'"
    },
    "ConceptShortDescriptions": {
      ".read": "auth != null",
      ".write": "auth != null && root.child('Users').child(auth.uid).child('permission').val() === 'author'"
    },
    "Users": {
      "$uid": {
        ".read": "auth != null && auth.uid == $uid",
        "waiverStatus": {
          ".write": "auth != null && auth.uid == $uid"
        },
        "permission": {
          ".write": "false"
        },
        "bktParams": {
          ".read": "auth != null && auth.uid == $uid",
          ".write": "auth != null && auth.uid == $uid"
        },
        "state": {
          ".write": "auth != null && auth.uid == $uid"
        },
        "userExperience": {
          ".write": "auth != null && auth.uid == $uid"
        },
        "condition": {
          ".read": "auth != null && auth.uid == $uid",
          ".write": "auth != null && auth.uid == $uid"
        },
        "isAdult": {
          ".read": "auth != null && auth.uid == $uid",
          ".write": "auth != null && auth.uid == $uid"
        },
        "createdAt": {
          ".read": "auth != null && auth.uid == $uid",
          ".write": "auth != null && auth.uid == $uid"
        },  
        "Data": {
          "AnswerSubmission": {
            ".read": "auth != null && auth.uid == $uid",
            ".write": "auth != null && auth.uid == $uid"
          },
          "InstructionsRead": {
            ".write": "auth != null && auth.uid == $uid"
          },
          "NewPageVisit": {
            ".indexOn": ["concept"],
            ".write": "auth != null && auth.uid == $uid"
          },
          "SessionEvents": {
            ".write": "auth != null && auth.uid == $uid"
          },
        }
      }
    },
    "Exercises": {
      ".read": "auth != null",
      ".write": "auth != null && root.child('Users').child(auth.uid).child('permission').val() === 'author'"
    },
    "Instructions": {
      ".read": "auth != null",
      ".write": "auth != null && root.child('Users').child(auth.uid).child('permission').val() === 'author'"
    },
    "static": {
      ".read": "auth != null"
    },
    "surveyLinks": {
      ".read": "auth != null",
      ".write": "auth != null"
    },
    "UsersNcme2019" : {
      ".read" : "auth != null",
      ".write": "auth != null"
    },
    "ExerciseAssignmentNcme2019" :{
      ".read" : "auth != null",
      ".write": "auth != null"
    }
  }
}