I had this exact same question when I saw it. This is handled by Security Rules [1]. You define these rules using JSON - basically read/write access to objects on a per-user basis. Seems like a good solution, depending on how flexible the validation style rules are (seem to be very flexible at a glance).
I'm pretty impressed by the product, looks like it may even be a game changer for doing quick web apps.
Comments
I had this exact same question when I saw it. This is handled by Security Rules [1]. You define these rules using JSON - basically read/write access to objects on a per-user basis. Seems like a good solution, depending on how flexible the validation style rules are (seem to be very flexible at a glance).
I'm pretty impressed by the product, looks like it may even be a game changer for doing quick web apps.
[1] https://www.firebase.com/docs/security/security-rules.html