Click views

[DanCurrie15]

No description provided.

[pedanticantic]

The definition of the rules before I started (in case I lose my own backup):

{
  "rules": {
    ".read": true,
    ".write": "auth !== null",
    "users": {
      ".read": "auth !== null",
      ".write": "auth !== null"
    }
  }
}

[pedanticantic]

I have done this work now - see the click views PR.

I've already updated the rules (I assume only on the development database) because it won't break anything. They are:

{
  "rules": {
    "products": {
      "$product": {
        ".write": true,
        "purchaseURlClicks": {
          ".validate": true
        },
        "$other": {
          ".validate": "auth !== null || data.val() === newData.val()"
        }
      }
    },
    ".read": true,
    ".write": "auth !== null",
    "users": {
      ".read": "auth !== null",
      ".write": "auth !== null"
    }
  }
}

The new rules are slightly more complicated that I wanted, but they're not too bad. In English, the above says you can edit a field if any of these are true:

• you are logged in
• you are setting the value of the purchaseURlClicks field in a product
• you are setting another field in products (not purchaseURlClicks) and are not changing its value

This allows a user who is not logged in, to save a product record with just the click count changed.