security.rule

memo/[userid]/* {
  permit : all;
  rule : account.id == userid;
}