[yismail]

If I recall correctly, you can set your firebase rules such that a user can only read/write/delete certain collections based on conditions such as if user.email == collection.email.

[justrealist]

Doing authorization within firestore breaks down instantly outside of toy applications.