Firebase安全性无法正常工作

Question

需要帮助了解＆＃34;跟踪＆＃34;规则。我能够读取该数据，即使它被标记为.read：false。

{
 "rules": {
   "User": {
      "$uid": {
        ".read":  "auth != null && auth.uid == $uid",
        ".write": "auth != null && auth.uid == $uid"
        }
    },
    "Purchase": {
      "$uid": {
        ".read":  "auth != null && auth.uid == $uid",
        ".write": "auth != null && auth.uid == $uid"
        }
    },
    "Parm": {
      ".read": true,
      ".write": false
    },
    "Tracking": {
      ".read": false,
      ".write": true
    }
  }
}

这是在IOS应用程序上完成的。这是代码：

Firebase *ref = [FBase referenceForTrackingDeviceId:sysparm.deviceId]; 
[ref observeSingleEventOfType:FEventTypeValue withBlock:^(FDataSnapshot *snapshot) { 
  if (snapshot.exists) { 
    DLog(@"got it"); 
  } else { 
    DLog(@"No data"); 
  } 
}]; 

来自调试器：

(lldb) po ref https://<My-Firebase>/Tracking/E8C0C8FB-DE20-4017-9C74-3A6DAD6D4DC7 (lldb) po snapshot.exists YES