firebaseRules.json

{
    "rules": {
        ".read": false,
        ".write": false,
        "admin_users": {
          ".read": "root.child('root_admins').child(auth.uid).val() === true",
          ".write": "root.child('root_admins').child(auth.uid).val() === true",
          "$user_id": {
            ".read": "root.child('root_admins').child(auth.uid).val() === true || auth.uid===$user_id",
            ".write": "root.child('root_admins').child(auth.uid).val() === true || auth.uid===$user_id"
          }
        },
        "common_apps": {
          ".read": "true",
          ".write": "root.child('root_admins').child(auth.uid).val() === true",
          "$app_group": {
            "$conference_id": {
                ".write": "root.child('conferences').child($conference_id).child('admins').child(auth.uid).val() === true || root.child('root_admins').child(auth.uid).val() === true"
            }
          }
        },
        "root_admins": {
          ".read": "root.child('root_admins').child(auth.uid).val() === true",
          ".write": "false"
        },
        "conferences": {
          ".read": "root.child('root_admins').child(auth.uid).val() === true",
          ".write": "root.child('root_admins').child(auth.uid).val() === true",
          "$conference_id": {
            ".read":  "data.child('admins').child(auth.uid).val() === true || root.child('root_admins').child(auth.uid).val() === true || $conference_id==='default'",
            ".write": "data.child('admins').child(auth.uid).val() === true || root.child('root_admins').child(auth.uid).val() === true",
            "currentDatabaseVersion": {
              ".read": "true"
            },
            "currentJSONDatabase": {
              ".read": "true"
            }
          }
        },
        "deployed_databases": {
          ".read": "true",
          "$conference_id": {
            ".write": "root.child('conferences').child($conference_id).child('admins').child(auth.uid).val() === true || root.child('root_admins').child(auth.uid).val() === true"
          }
        },
        "pre_release_databases": {
          ".read": "true",
          "$conference_id": {
            ".write": "root.child('conferences').child($conference_id).child('admins').child(auth.uid).val() === true || root.child('root_admins').child(auth.uid).val() === true"
          }
        },
        "user_data": {
          "$conference_id": {
            ".read": "root.child('conferences').child($conference_id).child('admins').child(auth.uid).val() === true || root.child('root_admins').child(auth.uid).val() === true",
            "$user_id": {
               ".write": "auth.uid === $user_id",
               ".read": "auth.uid === $user_id || root.child('conferences').child($conference_id).child('admins').child(auth.uid).val() === true || root.child('root_admins').child(auth.uid).val() === true",
               "$event_id": {
                 "note": {
                   ".write": "!data.child('updated_at').isNumber() || newData.child('updated_at').val() > data.child('updated_at').val()"
                 },
                 "vote": {
                   ".write": "!data.child('updated_at').isNumber() || newData.child('updated_at').val() > data.child('updated_at').val()"
                 },
                 "schedule": {
                   ".write": "!data.child('updated_at').isNumber() || newData.child('updated_at').val() > data.child('updated_at').val()"
                 },
                 "reading_list": {
                   ".write": "!data.child('updated_at').isNumber() || newData.child('updated_at').val() > data.child('updated_at').val()"
                 }
               }
            }
          }
        }
    }
}