database.rules.json

{
  "rules": {
    "admin": {
      ".read": "auth != null",
      ".write": "auth != null && root.child('admin').child(auth.uid).val() === '1'"
    },
    "paid": {
      ".read": "auth != null",
      ".write": "auth != null && root.child('admin').child(auth.uid).val() === '1'"
    },
    "confirmPayment": {
      ".read": "auth != null",
      ".write": "auth != null"
    },
    "confirmedPayment": {
      ".read": "auth != null && root.child('admin').child(auth.uid).val() === '1'",
      ".write": "auth != null && root.child('admin').child(auth.uid).val() === '1'"
    },
    "beta": {
      ".read": "auth != null",
      ".write": "auth != null && root.child('admin').child(auth.uid).val() === '1'"
    },
    "confirmBeta": {
      ".read": "auth != null",
      ".write": "auth != null"
    },
    "confirmedBeta": {
      ".read": "auth != null && root.child('admin').child(auth.uid).val() === '1'",
      ".write": "auth != null && root.child('admin').child(auth.uid).val() === '1'"
    },
    "favorites": {
      "$userId": {
        ".read": "auth.uid === $userId",
        ".write": "auth.uid === $userId"
      }
    },
    "satsang": {
      "$userId": {
        ".read": "auth.uid === $userId",
        ".write": "auth != null && root.child('admin').child(auth.uid).val() === '1'"
      }
    },
    "messages": {
      "$userId": {
        ".read": "auth != null && (auth.uid === $userId || root.child('admin').child(auth.uid).val() === '1')",
        ".write": "auth != null && auth.uid === $userId"
      }
    }
  }
}