The typical Firestore rule statement allow read, write: if request.auth != null means that only logged-in users are allowed to perform operations.