rules_version = '2';
service cloud.firestore {
  match /databases/{database}/documents {
    function isSuperAdmin() {
      return request.auth != null
        && (request.auth.token.email == 'mknaziri@gmail.com'
         || request.auth.uid == 'YqGpRNMfmmOqBOzdQP81T5xHXgg2');
    }
    function isRateAdmin() {
      return isSuperAdmin()
        || (request.auth != null
          && exists(/databases/$(database)/documents/config/rateAdmins)
          && request.auth.token.email in
             get(/databases/$(database)/documents/config/rateAdmins).data.emails);
    }
    match /ron95/{doc} {
      allow read: if true;
      allow write: if isRateAdmin();
    }
    match /config/superAdmin {
      allow read: if true;
      allow write: if isSuperAdmin();
    }
    match /config/rateAdmins {
      allow read: if request.auth != null;
      allow write: if isSuperAdmin();
    }
  }
}