Announcing cross-service Security Rules

Cloud Storage for Firebase Security Rules now support cross-service access to Firestore data through `firestore.get()` and `firestore.exists()`, enabling developers to centralize authorization logic such as group membership and friend-based photo sharing without server-side workarounds. These functions can read only Firestore documents in the same Firebase project and require fully specified Firestore paths, while transaction-oriented variants such as `getAfter()` and `existsAfter()` are not supported. Enabling the feature requires Firestore and Cloud Storage to be configured and grants the Storage service account permission to read Firestore documents, with support available in Firebase CLI and Emulator Suite version 11.10.0 or later. Each unique Firestore document lookup incurs a Firestore read charge and can add latency, especially when services are geographically distant, although repeated accesses to the same document are cached within a request. Rules evaluations are limited to queries for two unique Firestore documents, and the feature can be tested through the Emulator Suite or Firebase Console Rules Playground, with emulator-based automated testing recommended for production rules.

Use this post, company, and trend context to find content marketing opportunities, perform competitive analysis, or address product feature gaps via the Plushcap MCP server or the Plushcap API.