Questions about Firebase rules

[TIMAI2]

That was the short answer

1. If someone else has access to your aia project or firebase url or API key then they can wipe your data.

Words of warning here

Firebase Security Awareness!

If like many developers, you use firebase for an online database, or for storage, and you are running your own instance of firebase, not the MIT provided instance, then you should be aware of the need to secure your data when in production. If you are working with other peoples personal data, you have a duty to protect it. For development you can set read and write as true which makes life a little easier, but when you come to production you MUST tighten up your rules, and have some form of se…

2. You can make your firebase read only to anyone, but you would need to have an authenticated user to write data.

I cover firebase rules here:

Firebase Database and Storage: with the Web Component - Secure Rules

[fb] This is one of those, could it be done.... did I need to use the built-in firebase component, or the extensions available, in order to use Firebase database and storage, and operate secure rules. Well after some research and testing, it turns out that it could be done. Find out how: Firebase with a Web Component . . . My thanks @ChrisWard for proof reading and suggestions [EDIT - Now updated to include the new PATCH feature of the web component]