Catalog

Please sign in to continue

Phone Number or Email

Password

Firebase Rules Must Be Updated First

Open Firestore Rules and copy these rules then click Publish:

rules_version = '2';
service cloud.firestore {
  match /databases/{database}/documents {

    // ⚠️ Replace with YOUR real admin email(s) — must match ADMIN_EMAILS in the app
    function isSuperAdmin() {
      return request.auth != null &&
        request.auth.token.email in ["barwaryayan@gmail.com"];
    }

    function myManagedUser() {
      return get(/databases/$(database)/documents/managed_users/$(request.auth.uid));
    }

    function isCoAdmin() {
      return request.auth != null &&
        exists(/databases/$(database)/documents/managed_users/$(request.auth.uid)) &&
        myManagedUser().data.role == "co_admin" &&
        myManagedUser().data.disabled != true;
    }

    function isActiveManagedUser() {
      return request.auth != null &&
        exists(/databases/$(database)/documents/managed_users/$(request.auth.uid)) &&
        myManagedUser().data.disabled != true;
    }

    // Folder-scoping: a managed user (co_admin or regular) with a non-null allowedFolders
    // array can only read the folders/models listed in it; null = unrestricted (all folders).
    function myAllowedFolders() {
      return myManagedUser().data.allowedFolders;
    }
    function canReadFolder(folderId) {
      return isSuperAdmin() || isCoAdmin() ||
        (isActiveManagedUser() &&
          (myAllowedFolders() == null || folderId in myAllowedFolders()));
    }

    // Admin + co_admin can create/edit; ONLY Admin can delete (incl. move-to-trash).
    // "get" (single-doc read) is public — needed for anonymous share links; "list"
    // (browsing the full collection) is gated by canReadFolder.
    match /models/{modelId} {
      allow get: if true;
      allow read: if canReadFolder(resource.data.folderId);
      allow create, update: if isSuperAdmin() || isCoAdmin();
      allow delete: if isSuperAdmin();
    }
    match /folders/{folderId} {
      allow get: if true;
      allow read: if canReadFolder(folderId);
      allow create: if isSuperAdmin() || isCoAdmin();
      // co_admin may edit folder content, but cannot move it to (or out of) Trash —
      // that requires the "deleted" field to change, which is Admin-only.
      allow update: if isSuperAdmin() ||
        (isCoAdmin() && request.resource.data.deleted == resource.data.deleted);
      allow delete: if isSuperAdmin();
    }

    // Only the Admin manages accounts (create / role / disable / delete). A signed-in
    // account may read its own doc (needed for the app's own role lookup); admin/co_admin
    // may read any account; only the Admin can write.
    match /managed_users/{uid} {
      allow read: if request.auth != null &&
        (request.auth.uid == uid || isSuperAdmin() || isCoAdmin());
      allow write: if isSuperAdmin();
    }

    match /login_logs/{logId} {
      allow read: if isSuperAdmin() || isCoAdmin();
      allow create: if request.auth != null;
      allow update, delete: if isSuperAdmin();
    }

    match /app_settings/{document=**} {
      allow read: if true;
      allow write: if isSuperAdmin() || isCoAdmin();
    }

    match /shared_links/{code} {
      allow get: if true;
      allow create: if isSuperAdmin() || isCoAdmin();
    }

    match /analytics_events/{eventId} {
      allow create: if true;
      allow read: if isSuperAdmin();
      allow update: if false;
      allow delete: if isSuperAdmin();
    }
  }
}

⚠️ Replace barwaryayan@gmail.com above with your real admin email(s) — it must exactly match ADMIN_EMAILS in the app code.

After publishing click

📱

Downloading to Gallery

Preparing...

0 / 0 0%

⚠️ Stay in the app until this finishes

✓ All images downloaded!

Admin Panel

Folders

—

Models

—

With Image

—

In Trash

—

Quick Actions

Top Folders by Models

Downloads, shares & opens

Loading statistics...

Downloads

Folder + image opens

Unique visitors

Time	Role	Action	Device	Region

Catalog

Add New Model

Delete Model

Done ✓

New Folder

Move to Trash

Move to Folder

Folder Details

Folder Font Sizes

Folder Discount

Global Font Sizes

Global Discount

Download

Sign In

Share folder

Admin Panel

Domain Renewal Reminder

⚙️ User Permissions

Disable User

Delete User Permanently