firestore.rules

rules_version = '2';

service cloud.firestore {
  match /databases/{database}/documents {
    // Helper functions
    function isAuthenticated() {
      return request.auth != null;
    }
    
    function isOwner(userId) {
      return isAuthenticated() && request.auth.uid == userId;
    }

    // User profiles
    match /users/{userId} {
      allow read: if isAuthenticated();
      allow write: if isOwner(userId);
    }
    
    // Snippets
    match /snippets/{snippetId} {
      allow read: if true;  // Anyone can read snippets
      allow create: if isAuthenticated();
      allow update, delete: if isAuthenticated() && 
        (resource.data.userId == request.auth.uid);
    }
    
    // Collections
    match /collections/{collectionId} {
      allow read: if true;  // Anyone can read collections
      allow create: if isAuthenticated();
      allow update, delete: if isAuthenticated() && 
        (resource.data.userId == request.auth.uid);
    }
    
    // Favorites
    match /favorites/{userId} {
      allow read: if isOwner(userId);
      allow write: if isOwner(userId);
    }
  }
}