Enforcing user quota in Firebase -
what best way enforce per-user quota on data stored in firebase?
my users able create documents unique id on following path:
/documents/id/contents
the id uniquely generated using transaction. id reserved using verification rule (contents.id == auth.id
)
however how prevent user spamming db (by randomly allocating ids themselves)? can have rule counts number of ids allocated user , rejects them if count high?
there's no way this.
in cases enumerate children allowed exist (child1, child2, etc), , grant read / write each one. won't work large numbers though or ids don't know beforehand.
we have plans built features restrict number of allowed children , provide other features enforce quotas on users.
Comments
Post a Comment