database.rules.json

{
	"rules": {
		"admins": {
			".read": "root.child('admins').hasChild(auth.uid)"
		},

		"whitelist": {
			".read": true,
			".write": "root.child('admins').hasChild(auth.uid)",
			"$user_id": {
				".write": "root.child('admins').hasChild(auth.uid)",
				".validate": "newData.isBoolean()"
			}
		},

		"users": {
			".read": "root.child('admins').hasChild(auth.uid)",
			"$user_id": {
				"displayName": {
					".validate": "newData.isString()"
				},
				"email": {
					".validate": "newData.isString()"
				},
				"twitterUID": {
					".validate": "newData.isString()"
				},
				"$other": {
					".validate": false
				}
			}
		},

		"active_tweet_id": {
			".read": true,
			".write": "root.child('admins').hasChild(auth.uid) || root.child('whitelist').hasChild(auth.uid)",
			".validate": "newData.isString()"
		},

		"deploy_commit_hash": {
			".read": true,
			".write": false,
			".validate": "newData.isString()"
		},

		"tweets": {
			".read": "root.child('admins').hasChild(auth.uid) || root.child('whitelist').hasChild(auth.uid)",
			"$tweet_id": {
				"replies": {
					"$reply_id": {
						"approval_status": {
							".write": "root.child('admins').hasChild(auth.uid) || root.child('whitelist').hasChild(auth.uid)",
							"tier1": {
								".validate": "newData.val() === 'approved' || newData.val() === 'rejected' || newData.val() === 'pending'"
							},
							"tier2": {
								".validate": "newData.val() === 'approved' || newData.val() === 'rejected' || newData.val() === 'pending'"
							},
							"$other": {
								".validate": false
							}
						}
					}
				}
			}
		}
	}
}