Users Collection

users/{userId}

{
  "email": "[email protected]",
  "displayName": "Juan Pérez",
  "photoURL": "https://lh3.googleusercontent.com/...",
  
  "role": "customer",
  "permissions": [],
  
  "phone": "3001234567",
  "document": "1234567890",
  
  "addresses": [
    {
      "label": "Casa",
      "address": "Calle 123 #45-67 Apto 301",
      "city": "Bogotá",
      "department": "Cundinamarca",
      "isDefault": true
    },
    {
      "label": "Oficina",
      "address": "Carrera 7 #32-16 Piso 5",
      "city": "Bogotá",
      "department": "Cundinamarca",
      "isDefault": false
    }
  ],
  
  "createdAt": "2026-01-15T10:00:00Z",
  "lastLogin": "2026-03-05T09:30:00Z",
  
  "emailNotifications": true,
  "whatsappNotifications": false
}

const userDoc = await db.collection('users').doc(userId).get();
const userData = userDoc.data();

const snapshot = await db.collection('users')
    .where('role', '==', 'admin')
    .get();

const snapshot = await db.collection('users')
    .where('email', '>=', searchTerm)
    .where('email', '<=', searchTerm + '\uf8ff')
    .get();

// In auth-logic.js or Cloud Function
await db.collection('users').doc(user.uid).set({
    email: user.email,
    displayName: user.displayName || '',
    photoURL: user.photoURL || '',
    role: 'customer',
    createdAt: admin.firestore.FieldValue.serverTimestamp(),
    lastLogin: admin.firestore.FieldValue.serverTimestamp(),
    emailNotifications: true
});

onAuthStateChanged(auth, async (user) => {
    if (user) {
        // Check cached role
        let role = sessionStorage.getItem('pixeltech_user_role');
        
        if (!role) {
            const userSnap = await getDoc(doc(db, "users", user.uid));
            role = (userSnap.exists() && userSnap.data().role === 'admin') 
                ? 'admin' 
                : 'customer';
            sessionStorage.setItem('pixeltech_user_role', role);
        }
        
        const isAdmin = role === 'admin';
        const link = isAdmin ? '/admin/index.html' : '/profile.html';
        // Update UI...
    }
});

match /users/{userId} {
  // Users can read their own profile
  allow read: if request.auth != null && request.auth.uid == userId;
  
  // Users can update their own profile (except role)
  allow update: if request.auth != null && 
                request.auth.uid == userId &&
                request.resource.data.role == resource.data.role;
  
  // Admins can read/write all users
  allow read, write: if request.auth != null &&
                      get(/databases/$(database)/documents/users/$(request.auth.uid)).data.role == 'admin';
  
  // User creation via Cloud Functions or Auth triggers only
  allow create: if false;
}

// Role-based queries
users: [role ASC]

// Email search
users: [email ASC]

// Recent users
users: [createdAt DESC]

await db.collection('users').doc(userId).update({
    displayName: newName,
    phone: newPhone,
    document: newDocument
});

await db.collection('users').doc(userId).update({
    addresses: admin.firestore.FieldValue.arrayUnion({
        label: 'Nueva Dirección',
        address: 'Calle 456 #78-90',
        city: 'Medellín',
        department: 'Antioquia',
        isDefault: false
    })
});

const userDoc = await db.collection('users').doc(userId).get();
const addresses = userDoc.data().addresses || [];

const updated = addresses.map((addr, idx) => ({
    ...addr,
    isDefault: idx === targetIndex
}));

await db.collection('users').doc(userId).update({ addresses: updated });