# How to code review security rules

DevFeed: [How to code review security rules](<https://devfeed.tech/articles/how-to-code-review-security-rules-16373.md>)

Original publisher: [Read original article](<https://firebase.blog/posts/2021/01/code-review-security-rules>)

Author: Rachel Myers

Published: 2021-01-06T00:00:00Z

Content type: tutorial

Language: en

Sources: [Firebase Blog](<https://devfeed.tech/sources/firebase-blog.md>)

Topics: [Security](<https://devfeed.tech/topics/security.md>), [Code review](<https://devfeed.tech/topics/code-review.md>), [Firebase](<https://devfeed.tech/topics/firebase.md>), [Firestore](<https://devfeed.tech/topics/firestore.md>), [Realtime Database](<https://devfeed.tech/topics/realtime-database.md>), [engineering-culture](<https://devfeed.tech/topics/engineering-culture.md>)

Tags: [admin-sdk](<https://devfeed.tech/tags/admin-sdk.md>), [best-practices](<https://devfeed.tech/tags/best-practices.md>), [code-review](<https://devfeed.tech/tags/code-review.md>), [firebase](<https://devfeed.tech/tags/firebase.md>), [firestore](<https://devfeed.tech/tags/firestore.md>), [how-to](<https://devfeed.tech/tags/how-to.md>), [pii](<https://devfeed.tech/tags/pii.md>), [realtime-database](<https://devfeed.tech/tags/realtime-database.md>), [security](<https://devfeed.tech/tags/security.md>), [security-rules](<https://devfeed.tech/tags/security-rules.md>)

## AI overview

A tutorial on reviewing Firebase Security Rules, with examples focused on Firestore and guidance that also applies to Firebase Storage and, with language differences, the Realtime Database. It highlights global access rules, personally identifiable information, and document-level permissions.

## Source excerpt

News, tutorials, and updates from the Firebase team.