firestore.rules

rules_version = '2';

service cloud.firestore {
  match /databases/{database}/documents {
    // Outlets collection - public read, authenticated write with validation
    match /Outlets/{outletId} {
      // Allow public read access to all outlets
      allow read: if true;
      
      // Allow authenticated users to create outlets with proper validation
      allow create: if request.auth != null
        && request.resource.data != null
        && request.auth.uid == request.resource.data.userid
        && validateOutletData(request.resource.data);
      
      // Allow authenticated users to update their own outlets
      allow update: if request.auth != null
        && request.auth.uid == resource.data.userid
        && validateOutletData(request.resource.data);
      
      // Allow authenticated users to delete their own outlets
      allow delete: if request.auth != null
        && request.auth.uid == resource.data.userid;
    }
    
    // Users collection - users can only access their own data
    match /Users/{userId} {
      // Users can read and write their own user document
      allow read, write: if request.auth != null && request.auth.uid == userId;
      
      // User's outlets subcollection
      match /Outlets/{outletId} {
        // Users can read and write their own outlet references
        allow read, write: if request.auth != null && request.auth.uid == userId;
      }
      
      // User's vehicles subcollection
      match /Vehicles/{vehicleId} {
        // Users can read and write their own vehicle data
        allow read, write: if request.auth != null && request.auth.uid == userId;
      }
    }
  }
  
  // Helper function to validate outlet data
  function validateOutletData(data) {
    return data.keys().hasAll(['latitude', 'longitude', 'userName', 'userid', 'locationName', 'chargerType', 'description'])
      && data.latitude is number
      && data.longitude is number
      && data.latitude >= -90 && data.latitude <= 90
      && data.longitude >= -180 && data.longitude <= 180
      && data.userName is string
      && data.userid is string
      && data.locationName is string
      && data.chargerType is string
      && data.description is string
      && data.userName.size() >= 2
      && data.userid.size() >= 3
      && data.locationName.size() >= 5
      && data.chargerType.size() >= 2
      && data.description.size() >= 1;
  }
}