service cloud.firestore {
    match /databases/{database}/documents {
        // Anyone can read a product, only authorized
        // users can create or update. Deletes are not allowed.
        match /products/{productId} {
            allow read: if true;
            allow create, update: if request.auth.uid != null;
        }
    }
}