storage.rules

rules_version = '2';
service firebase.storage {
  match /b/{bucket}/o {
    match /users {
      match /{userUid} {
       	match /{allPaths=**} {
       		allow read, write: if (request.auth != null && request.auth.uid == userUid)
       	}
      	
      }
    }
    match /sistemaEscolar {
      match /infoEscola {
				match /{allPaths=**} {
        	allow read, write: if
          (request.auth!=null &&
          	(request.auth.token.secretaria == true || 
          		request.auth.token.master == true))
        }
      }
      match /billetAttachments {
				match /{allPaths=**} {
        	allow read, write: if
          (request.auth!=null &&
          	(request.auth.token.secretaria == true || 
          		request.auth.token.master == true || request.auth.token.adm == true))
        }
      }
      match /studentFiles {
				match /{allPaths=**} {
        	allow read, write: if
          (request.auth!=null &&
          	(request.auth.token.secretaria == true || 
          		request.auth.token.master == true || request.auth.token.adm == true))
          allow create
        }
      }
      match /alunos {
        
        match /{allPaths=**} {
        allow read, write: if 
          (request.auth!=null && 
          (request.auth.token.secretaria == true || 
          request.auth.token.master == true));
          allow read: if request.auth!=null && request.auth.token.aluno == true;
        }	
      }
      match /chamados {
      	match /{allPaths=**} {
        	allow read, write: if
          (request.auth!=null &&  
          (request.auth.token.master == true));
        }
      }
    }
  }
}