Reading Access Restriction
devmount opened this issue · comments
To avoid an unsecure Firestore rule set, the reading permission should be restricted in general.
- Implement login page
- Implement restriction to show content only if user is confirmed and has reading permission
- Handle page reload
- implement email notifications for
registrations (@admin)* and approval (@user)** - Update Firestore rules
- Test and improve registration process
* Sending custom emails is currently not supported by firebase (at least not on the free tier)
** Sending approval emails is indirectly possible via mailto links with subject and body url parameter
I've tested this and will close this for now. Further testing is still very welcome.