Update nested collection access of invitations

StanfordBDHG · Nov 4, 2024 · 7d748d5 · 7d748d5
1 parent 2dcd268
commit 7d748d5
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/firestore.rules b/firestore.rules
@@ -63,7 +63,7 @@ service cloud.firestore {
     match /invitations/{invitationId}/{collectionName}/{documentId} {
       function isOwnerOrClinicianOfSameOrganization() {
         let invitation = getInvitation(invitationId);
-        return isOwnerOrClinicianOf(invitation.user.organization);
+        return invitation != null && isOwnerOrClinicianOf(invitation.data.user.organization);
       }
 
       function isPatientWritableCollectionName() {