Firebase group security rule configuration - firebase

Question

I am new to Firebase, and I was trying to setup security rules where I want users to be grouped by dynamically created groups. I also want the user to be able to read all content from the same group, but not other groups.
When I create new users and assign them some groups using push, I get data like the following:
{
"groups" : {
"default" : {
"-Jtcdyniz1yVwNQCGSAR" : {
"user" : "simplelogin:5"
},
"-Jtd114KNQ-rqh6-rlnI" : {
"user" : "simplelogin:7"
}
}
},
"users" : {
"simplelogin:5" : {
"group" : "default",
"name" : "123"
},
"simplelogin:6" : {
"group" : "default1",
"name" : "1"
},
"simplelogin:7" : {
"group" : "default",
"name" : "23"
}
}
}
Can anyone help here? How can I setup authentication rules? I have tried with following but it doesn't seem to work...
{
"rules": {
"users" : {
"$userid" : {
".read" : "data.child('users').child($userid).child('group').val() === data.child('users').child(auth.id).child('group').val()",
".write" : "$userid === auth.uid"
}
}
}
}
I assume that this should be fairly simple use-case but unfortunately didn't get much help.
Whatever posts that I found had direct users inside a group instead of a subchild of a random, unique string.
EDITED:
I tried with edited rules like :
{
"rules": {
"groups" : {
".read" : "true",
".write" : "true"
},
"users" : {
"$userid" : {
".read" : "data.child('group').val() === root.child('users').child(auth.id).child('group').val()",
".write" : "$userid === auth.uid"
}
}
}
}
but I did not get much help.
For code, I have added it as a fiddler at : http://jsfiddle.net/digish_gabhawala/ytwmokg0/
What I want at the moment is two simple things:
1> as a user, I should be able to edit my name
2> when I click button, I should be able to get names of all users in my group.
When I tried the code as in fiddler, I am getting permission issues.
It would be great if I can get what is it that I am doing wrong.

Answer 1

I'm pretty sure that the issue is that you're using $userid instead of $uid. So changing this should make it work. I'm using $uid in my security rules.