【发布时间】:2020-01-14 21:50:24
【问题描述】:
我有一个文件“posts”的firebase集合,每个post文件包含四个字段:“likes”、“dislikes”、“super”和“total”。 我使用以下三个数据对象对每个文档执行批量更新:
var data_like_obj = {
likes: firebase.firestore.FieldValue.increment(1),
total: firebase.firestore.FieldValue.increment(1)
}
var data_dislike_obj = {
dislikes: firebase.firestore.FieldValue.increment(1),
total: firebase.firestore.FieldValue.increment(-1)
}
var data_super_obj = {
super: firebase.firestore.FieldValue.increment(1),
total: firebase.firestore.FieldValue.increment(4)
}
我找不到允许我检查增量是否有效的安全规则,即只有(+1、-1 或 +4),没有别的。我做了以下安全功能:
function validVote() {
return ( ( isUpdatingField("super") || isUpdatingField("liked") || isUpdatingField("disliked") ) && isUpdatingField("total") ) &&
(( isUpdatingField("disliked") && (0 <= (int(incomingData().disliked) - int(existingData().disliked)) && (int(incomingData().disliked) - int(existingData().disliked)) <= 1) ) ||
( isUpdatingField("super") && (0 <= (int(incomingData().super) - int(existingData().super)) && (int(incomingData().super) - int(existingData().super)) <= 1) ) ||
( isUpdatingField("liked") && (0 <= (int(incomingData().liked) - int(existingData().liked)) && (int(incomingData().liked) - int(existingData().liked)) <= 1) )) &&
( incomingData().total == incomingData().super * 4 + incomingData().liked - incomingData().disliked )
;
}
// Utility Funcs
function existingData() {
return resource.data;
}
function incomingData() {
return request.resource.data;
}
当我在模拟器上测试时,该功能运行良好,但模拟器无法提交FieldValue.increment对象。如何验证增量是否合法?
【问题讨论】:
标签: javascript firebase google-cloud-firestore firebase-security