storage.rules

rules_version = '2';

service firebase.storage {
  match /b/{bucket}/o {

    // Original Uploads: Allow users to read/write files only within their own folder.
    // Path: audiobooks/{userId}/{fileName}
    match /audiobooks/{userId}/{allPaths=**} {
      // Allow read/write (upload/download/delete) if the user is authenticated
      // and the {userId} in the path matches their authentication UID.
      allow read, write: if request.auth != null && request.auth.uid == userId;
    }

    // Generated Audio Files: Allow users to read/write files only within their own folder.
    // Path: audiobooks_generated/{userId}/{fileName}
    match /audiobooks_generated/{userId}/{allPaths=**} {
        // Allow read/write (upload/download/delete) if the user is authenticated
        // and the {userId} in the path matches their authentication UID.
        allow read, write: if request.auth != null && request.auth.uid == userId;
    }

    // Other paths (if any): Add more specific rules or deny access by default.
    // Deny access to all other paths by default unless explicitly allowed.
    // match /{allPaths=**} {
    //   allow read, write: if false;
    // }
  }
}