database.rules.json

{
  "rules": {
    ".read": "auth.uid == 'secret-service-worker'",
    ".write": "auth.uid == 'secret-service-worker'",
    "users": {
      ".read": "auth != null && root.child('roles').child('usermanagers').child(auth.uid).val() == true",
      ".write": "auth != null && newData.parent().child('roles').child('usermanagers').child(auth.uid).val() == true",
      "$userid": {
        ".read": "auth != null",
        ".write": "auth != null && auth.uid == $userid",
        "balance": {
          "$seasonid": {
            ".validate": "newData.isNumber() && (auth.uid == 'secret-service-worker' || data.val() == null && newData.val() == 100 || newData.val() == data.val() || data.val() != null && newData.val() != null && newData.val() >= 0)"
          }
        },
        "wagers": {
          "$wagerid": {
            ".validate": "!(newData.parent().parent().parent().parent().child('episodes').child(newData.parent().parent().parent().parent().child('bets').child($wagerid).child('episode').val()).child('air_at').val() <= now)",
            "wager": {
              ".validate": "!(newData.val() != null) && data.val() == 0 || newData.val() >= 0 && root.child('users').child($userid).child('balance').child(newData.parent().parent().parent().parent().parent().child('bets').child($wagerid).child('season').val()).val() + (data.val() != null ? data.val() : 0) - newData.val() == newData.parent().parent().parent().parent().parent().child('users').child($userid).child('balance').child(newData.parent().parent().parent().parent().parent().child('bets').child($wagerid).child('season').val()).val()"
            }
          }
        }
      }
    },
    "secure": {
      "$userid": {
        ".read": "auth != null && auth.uid == $userid",
        ".write": "auth != null && auth.uid == $userid"
      }
    },
    "names": {
      "$nameid": {
        ".read": "true",
        ".write": "auth != null && (data.val() == null || data.val() != null && newData.val() == null && data.val() == auth.uid)"
      }
    },
    "series": {
      ".read": "true",
      ".write": "auth != null && newData.parent().child('roles').child('datamanagers').child(auth.uid).val() == true"
    },
    "seasons": {
      ".read": "true",
      ".write": "auth != null && newData.parent().child('roles').child('datamanagers').child(auth.uid).val() == true"
    },
    "episodes": {
      ".read": "true",
      ".write": "auth != null && newData.parent().child('roles').child('datamanagers').child(auth.uid).val() == true"
    },
    "events": {
      ".read": "true"
    },
    "bets": {
      ".read": "true",
      ".write": "auth != null && newData.parent().child('roles').child('datamanagers').child(auth.uid).val() == true"
    },
    "stats": {
      ".read": "true"
    },
    "labels": {
      "$labelid": {
        ".read": "true"
      }
    },
    "leaderboard": {
      ".read": "true",
      "$uid": {
        "displayName": {
          ".write": "data.val() != null && newData.val() != null && auth != null"
        },
        "anon": {
          ".write": "data.val() != null && newData.val() != null && auth != null"
        }
      }
    }
  }
}