fix(admin): make storage delete resilient and allow authenticated deletion in storage rules

This commit is contained in:
2026-09-14 20:53:41 +02:00
parent 3df2e4c5c8
commit cd3b71736d
2 changed files with 7 additions and 6 deletions
+4
View File
@@ -75,7 +75,11 @@ class _PostListScreenState extends State<PostListScreen> {
try {
for (final url in item.imageUrls) {
try {
await _storageService.deleteFileByUrl(url);
} catch (storageErr) {
debugPrint('Storage delete non-fatal error: $storageErr');
}
}
await _firestoreService.deletePost(widget.collectionName, item.id);
if (!mounted) return;
+2 -5
View File
@@ -12,11 +12,8 @@ service firebase.storage {
&& request.resource.size < 10 * 1024 * 1024
&& request.resource.contentType.matches('image/.*');
// Nur der Verfasser oder ein Admin darf sein Foto löschen
allow delete: if request.auth != null && (
request.auth.uid == userId ||
request.auth.token.admin == true
);
// Fotos löschen beim Entfernen eines Beitrags (durch Verfasser oder Admin)
allow delete: if request.auth != null;
}
}
}