storage.rules

rules_version = '2';
service firebase.storage {
  match /b/{bucket}/o {
    match /feedback/{userId}/{file=**} {
      allow write: if request.auth != null
                   && request.auth.uid == userId
                   && request.resource.size < 5 * 1024 * 1024
                   && request.resource.contentType.matches('image/(jpeg|png|webp)');

      allow read: if request.auth != null
                  && (request.auth.uid == userId
                      || request.auth.token.admin == true);
    }
    match /users/{uid}/avatar{
      allow read: if true;
      allow write: if request.auth != null
                   && request.auth.uid == uid
                   && request.resource.size < 5*1024*1024
                   && request.resource.contentType.matches('image/(jpeg|png|webp)');
    }
    match /events/{eventId}/{file=**}{
      allow read: if true;
      allow write: if request.auth != null
                   && (request.auth.token.admin == true || 
                       (request.auth.token.club == true && 
                        firestore.exists(/databases/(default)/documents/events/$(eventId)) &&
                        request.auth.uid == firestore.get(/databases/(default)/documents/events/$(eventId)).data.ownerId))
                   && request.resource.size < 5*1024*1024
                   && request.resource.contentType.matches('image/(jpeg|png|webp)');
    }
    match /{allPaths=**} {
      allow read, write: if false;
    }
  }
}