rules_version = '2';

service cloud.firestore {
  match /databases/{database}/documents {
    // Base rules: By default, lock down all access.
    // Data Connect will operate with admin privileges from the backend
    // and will not be subject to these client-side rules.
    match /{document=**} {
      allow read, write: if false;
    }
  }
}