I am using Firebase Cloud Firestore, and I want to modify my rules to restrict users from querying a collection.
This should not be allowed:
firesto
Give the following a try. I haven't been able to test it, so apologies if I've mistyped something.
match /users/{userId} { allow read: if $(request.auth.uid) == $(userId); }