Abhyuday Tomar AbhyudayTomar

match /users/{userId} {
  allow create: if isOwner(userId) && isValidUser(request.resource.data);
  // the role can never change after sign-up
  allow update: if isOwner(userId) && isValidUser(request.resource.data) &&
                  request.resource.data.role == resource.data.role;
}

match /appointments/{appointmentId} {
  allow read: if isAuthenticated() &&
    (request.auth.uid == resource.data.doctorId ||
     request.auth.uid == resource.data.patientId);
}