title: Basic Firebase Rules
body: <p>I am new to firebase, and am a bit stuck with the rules.</p>
  
  <p>My app is essentially a blog-site. 
  It allows non-logged in to read posts, users, comments.
  It also allows logged-in and verified users to create a post.</p>
  
  <p>Here are my rules</p>
  
  <pre><code>rules_version = '2';
  service cloud.firestore {
    match /databases/{database}/documents {
      match /{document=**} {
        allow read: if true;
        allow write: if request.auth.uid != null;
      }
    }
  }
  </code></pre>
  
  <p>Firebase sends me emails that these are not secure due to "any user can read your entire database".
  Is there something I am missing? As I want people to be able to read the data without being logged in?</p>