🚧 Maintenance mode is currently ON — the client portal is showing a maintenance screen instead of any client data.

Click "Scan" to check how many orders are affected — nothing is changed until you confirm.

🔍 Scan ✓ Fix Them

rules_version = '2'; service cloud.firestore { match /databases/{database}/documents { function isSignedIn() { return request.auth != null; } function isAdmin() { return isSignedIn() && request.auth.token.email == get(/databases/$(database)/documents/settings/adminProfile).data.email; } function isOwnerClient(clientId) { return isSignedIn() && exists(/databases/$(database)/documents/clients/$(clientId)) && get(/databases/$(database)/documents/clients/$(clientId)).data.portalEmail == request.auth.token.email; } // Orders — a client may read ONLY their own orders (matched by clientId); // only admin can write. This is the field the app filters on client-side — // without this rule, that filter is cosmetic only. match /orders/{orderId} { allow read: if isAdmin() || isOwnerClient(resource.data.clientId); allow write: if isAdmin(); } // Clients — a client may read ONLY their own client document, never the // full roster of other businesses using this portal. Uses resource.data // directly (this IS the document being checked) instead of a // self-referential get()/exists() lookup, which is unnecessary here and // was breaking the client login query that reads this collection. match /clients/{clientId} { allow read: if isAdmin() || (isSignedIn() && resource.data.portalEmail == request.auth.token.email); // A client may clear ONLY their own portalPasswordPending flag — this runs // automatically right after they log in with a newly admin-set password // (see applyPendingPassword()), so the "pending login" badge can turn off. // Scoped with affectedKeys() so a client can never touch any other field. allow update: if isAdmin() || ( isSignedIn() && resource.data.portalEmail == request.auth.token.email && request.resource.data.diff(resource.data).affectedKeys().hasOnly(['portalPasswordPending']) ); allow create, delete: if isAdmin(); } // Client messages (unchanged from before) match /clientMessages/{clientId}/{document=**} { allow read: if isAdmin() || isOwnerClient(clientId); allow write: if isAdmin(); } // Admin-only operational data — clients never read these collections match /rto_orders/{id} { allow read, write: if isAdmin(); } match /returned_orders/{id} { allow read, write: if isAdmin(); } match /weight_discrepancy/{id} { allow read, write: if isAdmin(); } match /supplier_credits/{id} { allow read, write: if isAdmin(); } match /products/{id} { allow read, write: if isAdmin(); } match /suppliers/{id} { allow read, write: if isAdmin(); } match /settings/{id} { allow read, write: if isAdmin(); } // Maintenance flag — any signed-in user (admin or client) needs to read // this to know whether the portal should show the maintenance screen; // only admin can toggle it. match /app_settings/{id} { allow read: if isSignedIn(); allow write: if isAdmin(); } // Deny anything not explicitly listed above match /{document=**} { allow read, write: if false; } } }

rules_version = '2';
service cloud.firestore {
  match /databases/{database}/documents {

    function isSignedIn() { return request.auth != null; }
    function isAdmin() {
      return isSignedIn()
        && request.auth.token.email ==
           get(/databases/$(database)/documents/settings/adminProfile).data.email;
    }
    function isOwnerClient(clientId) {
      return isSignedIn()
        && exists(/databases/$(database)/documents/clients/$(clientId))
        && get(/databases/$(database)/documents/clients/$(clientId)).data.portalEmail
           == request.auth.token.email;
    }

    match /orders/{orderId} {
      allow read: if isAdmin() || isOwnerClient(resource.data.clientId);
      allow write: if isAdmin();
    }

    match /clients/{clientId} {
      allow read: if isAdmin() || (isSignedIn() && resource.data.portalEmail == request.auth.token.email);
      allow update: if isAdmin() || (
        isSignedIn()
        && resource.data.portalEmail == request.auth.token.email
        && request.resource.data.diff(resource.data).affectedKeys().hasOnly(['portalPasswordPending'])
      );
      allow create, delete: if isAdmin();
    }

    match /clientMessages/{clientId}/{document=**} {
      allow read: if isAdmin() || isOwnerClient(clientId);
      allow write: if isAdmin();
    }

    match /rto_orders/{id}         { allow read, write: if isAdmin(); }
    match /returned_orders/{id}    { allow read, write: if isAdmin(); }
    match /weight_discrepancy/{id} { allow read, write: if isAdmin(); }
    match /supplier_credits/{id}   { allow read, write: if isAdmin(); }
    match /products/{id}           { allow read, write: if isAdmin(); }
    match /suppliers/{id}          { allow read, write: if isAdmin(); }
    match /settings/{id}           { allow read, write: if isAdmin(); }

    match /app_settings/{id} {
      allow read: if isSignedIn();
      allow write: if isAdmin();
    }

    match /{document=**} {
      allow read, write: if false;
    }
  }
}

This replaces any previous rules (including a clientMessages-only version) with one complete ruleset covering every collection the app uses. Deploy it, then reload both the admin and a client portal session to confirm nothing broke.