# Firebase Security Rules - for super users

**URL:** <https://community.thunkable.com/t/firebase-security-rules-for-super-users/1028313>\
**Category:** Questions about Thunkable X\
**Tags:** firebase\
**Created:** [December 8, 2020, 11:34am UTC](https://community.thunkable.com/t/firebase-security-rules-for-super-users/1028313 "2020-12-08T11:34:37Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![oreeldadln](https://sea1.discourse-cdn.com/flex015/user_avatar/community.thunkable.com/oreeldadln/32/89185_2.png) [@oreeldadln](https://community.thunkable.com/u/oreeldadln)\
**Post date:** [December 8, 2020, 11:34am UTC](https://community.thunkable.com/t/firebase-security-rules-for-super-users/1028313/1 "2020-12-08T11:34:37Z")

</div>

Hello,  
I have a question about firebase.  
I want to build an app with 2 types of users.  
Regular users that write data, and super users that can read the data of the regular users.

Right now, my rules are:

```
"Users":{
  "$uid":{
        ".read": "$uid === auth.uid",
".write": "$uid === auth.uid"
  }
},

```

= All the users can write and read their own data.

What rules should I apply to make this kind of feature?

Thank you!

---

<div class="post-metadata">

**Author:** ![muneer](https://sea1.discourse-cdn.com/flex015/user_avatar/community.thunkable.com/muneer/32/75210_2.png) [@muneer](https://community.thunkable.com/u/muneer)\
**Post date:** [December 8, 2020, 12:50pm UTC](https://community.thunkable.com/t/firebase-security-rules-for-super-users/1028313/2 "2020-12-08T12:50:22Z")

</div>

The way you are describing the issue makes me believe that this something to be done within the App rather than the DB.

It is your app that would control access to the data based on login credentials that you specify within your App user structure.

---

<div class="post-metadata">

**Author:** ![ioannis](https://sea1.discourse-cdn.com/flex015/user_avatar/community.thunkable.com/ioannis/32/146956_2.png) [@ioannis](https://community.thunkable.com/u/ioannis)\
**Post date:** [November 8, 2024, 12:19pm UTC](https://community.thunkable.com/t/firebase-security-rules-for-super-users/1028313/3 "2024-11-08T12:19:56Z")

</div>