master
service firebase.storage { match /b/{bucket}/o { match /{allPaths=**} { allow read, write: if request.auth!=null; } } }