I am currently working on an Angular project that is connected to a Firestore database.
Within the database, there is a collection called users, and each document within this collection contains a nested collection named hugeCollection. I have updated the default rules of Firestore with the following settings in order to restrict access to these nested collections:
service cloud.firestore {
match /databases/{database}/documents {
match /users/{userId}/hugeCollection/{document} {
allow read : if false;
allow write : if false;
}
}
}
Despite implementing these rule changes, my Angular project is still able to fetch data from the subCollections. When the rules are set as above, the browser's console displays the error message:
ERROR Error: Missing or insufficient permissions
However, when I modify the rules by changing the attribute values from false to true, the console errors cease to appear. Although this resolves the issue, I expected that setting the value to false would prevent querying the subCollections.
What could be causing this discrepancy? Any assistance would be greatly appreciated. Thank you.