firestore.rules

rules_version = '2';
service cloud.firestore {
  match /databases/{database}/documents {
    match /users/{userId} {
      // spacekatb@gmail.com 계정은 모든 데이터에 접근 가능
      allow read, write: if request.auth != null && 
                        request.auth.token.email == 'spacekatb@gmail.com';
    }
    
    match /habits/{userId}/{document=**} {
      allow read, write: if request.auth != null && request.auth.uid == userId;
    }
    
    match /exercises/{document=**} {
      allow read, write: if request.auth != null && (
        request.auth.token.email == 'spacekatb@gmail.com' ||
        request.auth.uid == resource.data.userId ||
        request.auth.uid == request.resource.data.userId
      );
    }

    match /weeklyGoals/{goalId} {
      allow read, write: if request.auth != null && (
        request.auth.token.email == 'spacekatb@gmail.com' ||
        goalId.matches(request.auth.uid + '_.*') ||
        resource.data.userId == request.auth.uid ||
        request.resource.data.userId == request.auth.uid
      );
    }
  }
}