Firestore security rules for server side code

Question

According to what I've read, when a function runs via the server, all Firestore rules are ignored. How can I avoid this behavior?

Answer 1

Cloud Functions use the Admin SDK to access Firestore, which runs with administrative privileges and always bypasses security rules. There is (currently) no way to change this behavior.

Also see:

• How to use Admin SDK with limited privileges on Firestore?, which shows an interesting workaround.
• Firebase firstore security rules for cloud functions
• How to make Firebase Functions act as a user instead of being an admin?