[Query] Admin Controls

[Cobwebster]

Hey,

Quick question, in order to allow particular users particular admin access features (or any limited features) would it not be required to do some server side validation? I'm in the process of making a app and I use firebase auth to register users but I want to restrict some features to some users, but given that those checks are client side prob means they can be exploited.

[iamuteti]

Looks like this is something you will have to implement. It has already been done in Angular (https://angularfirebase.com/lessons/role-based-permissions-and-authorization-with-firebase-auth/) so i'm pretty sure you can extend it in React and some server side code