Multi-tenancy

Are there any examples of using Emberfire with a multi-tenant application?

I’ve trying adjusting https://www.firebase.com/docs/web/guide/understanding-security.html#section-authorization and am not clear how this fits in to the emberfire portion of reading/writing data. Do I have to adjust the path of each type? If so, how does it authenticate and know it really is the user?

I have this rule setup:

    "clients": {
      "$user_id": {
        ".read": "(auth != null) && ($user_id === auth.uid)",
        ".write": "(auth != null) && ($user_id === auth.uid)"
      }
    }

And when I go to write a new record, I’m getting http://cl.ly/image/032f2Y0B2F0l.

Does the path need to be different to hit that security rule? If so, is there an example of that somewhere?

[tstirrat]

For security, you can nest the rules further down under a tenant variable, that way you can use the tenant variable to check for membership:

{
  "rules": {

     "$tenant_id": {
       "users": {
         "$post_id": {

          // readable by any user who is part of the same tenant
          ".read": "root.child($tenant_id).child('users').child(auth.uid).exists()",

          // writable by original author only
          ".write": "data.child('author').val() === auth.uid"

        },
      }
    }

  }
}

I’ll need more info on the other issue. How and when did you replace the adapter._ref? Did it write the data to the root of the firebase store? or did it correctly namespace the data? What code are you using to query?

Check that the code works without namespacing first

[tstirrat]

Hey, no problem. I’m glad its sorted out 😃