rules.json

{
  "rules": {
    "queue": {
      "alltasks": {
        ".read": "auth.uid === 'kubric-fbqueue-admin'",
        ".write": "auth.uid === 'kubric-fbqueue-admin'",
        "$user": {
          ".read": "auth.uid === 'kubric-fbqueue-admin' || auth.uid === $user",
          ".write": "auth.uid === 'kubric-fbqueue-admin'",
          ".indexOn": ["user","__type__", "__app__", "__index__","__app_jobtype__"],
        }
      },
      "apps": {
        ".read": "auth.uid === 'kubric-fbqueue-admin'",
        ".write": "auth.uid === 'kubric-fbqueue-admin'",
        "$app": {
          ".read": "auth.uid === 'kubric-fbqueue-admin'",
          ".write": "auth.uid === 'kubric-fbqueue-admin'",
          "$jobtype": {
            ".read": "auth.uid === 'kubric-fbqueue-admin'",
            ".write": "auth.uid === 'kubric-fbqueue-admin'",
            "specs": {
              ".read": "auth.uid === 'kubric-fbqueue-admin'",
              ".write": "auth.uid === 'kubric-fbqueue-admin'",
              ".indexOn": ["error_state"],
              "$specId": {
                ".read": "auth.uid === 'kubric-fbqueue-admin'",
                ".write": "auth.uid === 'kubric-fbqueue-admin'",
                ".validate": "newData.hasChild('in_progress_state')",
                "start_state": {
                  ".validate": "newData.isString()"
                },
                "in_progress_state": {
                  ".validate": "newData.isString()"
                },
                "finished_state": {
                  ".validate": "newData.isString()"
                },
                "error_state": {
                  ".validate": "newData.isString()"
                },
                "timeout": {
                  ".validate": "newData.isNumber() && newData.val() > 0"
                },
                "retries": {
                  ".validate": "newData.isNumber() && newData.val() >= 0"
                },
                "$other": {
                  ".validate": true
                }
              }
            },
            "tasks": {
              ".read": "auth.uid === 'kubric-fbqueue-admin' || true",
              ".write": "auth.uid === 'kubric-fbqueue-admin'",
              ".indexOn": ["user", "_state", "__type__", "__app__", "__wfstatus__", "__index__", "__index_wfstatus__"],
              "$taskId": {
                ".read": "auth.uid === 'kubric-fbqueue-admin' || data.child('user').val() === auth.uid",
                ".write": "auth.uid === 'kubric-fbqueue-admin'",
                ".validate": "newData.hasChildren(['__type__']) || (auth.canProcessTasks === true && newData.hasChildren(['_state', '_state_changed', '_progress']))",
                "_state": {
                  ".validate": "newData.isString()"
                },
                "_state_changed": {
                  ".validate": "newData.isNumber() && (newData.val() === now || data.val() === newData.val())"
                },
                "_owner": {
                  ".validate": "newData.isString()"
                },
                "_progress": {
                  ".validate": "newData.isNumber() && newData.val() >= 0 && newData.val() <= 100"
                },
                "_error_details": {
                  "error": {
                    ".validate": "newData.isString()"
                  },
                  "error_stack": {
                    ".validate": "newData.isString()"
                  },
                  "previous_state": {
                    ".validate": "newData.isString()"
                  },
                  "original_task": {
                    /* This space intentionally left blank, for malformed tasks */
                  },
                  "attempts": {
                    ".validate": "newData.isNumber() && newData.val() > 0"
                  },
                  "$other": {
                    ".validate": false
                  }
                },
                "_id": {
                  ".validate": "newData.isString()"
                },
                "type": {
                  ".validate": "newData.isString()"
                },
                "$other": {
                  ".validate": true
                }
              }
            }
          }
        }
      }
    }
  }
}