Modifying my NoSQL DB like this, solved all of my concerns { " rules ": { " ingredients " : { " .read ": "true" , " .write ": "true" }, " orders " : { " .read ": "auth.uid != null && query.equalTo == auth.uid" , " .write ": "auth != null" , " .indexOn " : [ "userId" ] } } }