firestore.rules

rules_version = '2';
service cloud.firestore {
  match /databases/{database}/documents {

    match /comments/{commentDocId} {
      allow read, create, update: if true;
      allow delete: if false;
    }
    // Allow public read access, but only content owners can write
    match /comments/{commentDocId}/comments/{documents=**} {
      allow read: if true
      allow create: if request.auth.uid == request.resource.data.authorId;
      allow update, delete: if request.auth.uid == resource.data.authorId;
    }
    match /comments/{commentDocId}/commentLikes/{documents} {
      allow read: if true
      allow create: if request.auth.uid == request.resource.data.userId;
      allow delete: if request.auth.uid == resource.data.userId;
    }
    

  }
}