refactor(admin): remove hardcoded email and dynamically resolve admin privileges via Firestore Admins collection

2026-09-14 11:44:04 +02:00
parent c3513e85e5
commit 877862aaf2
3 changed files with 65 additions and 15 deletions
@@ -15,8 +15,7 @@ service firebase.storage {
      // Nur der Verfasser oder ein Admin darf sein Foto löschen
      allow delete: if request.auth != null && (
        request.auth.uid == userId ||
-        request.auth.token.admin == true ||
-        request.auth.token.email == 'nicolas@gruber.info'
+        request.auth.token.admin == true
      );
    }
  }