ใส่ Firestore rule

service cloud.firestore {
  match /databases/{database}/documents {
    function isAdmin() {
      return request.auth.uid != null || get(/databases/$(database)/documents/users/$(request.auth.uid)).data.role == 'admin';
    }

    match /users/{userId} {
      allow read, write: if request.auth != null && (request.auth.uid == userId || isAdmin());
    }
  }
}

rules_version = '2';

service cloud.firestore {
  match /databases/{database}/documents {
    match /products/{productId} {
      allow read: if (request.auth != null && isAdmin()) || (resource.data.status == 'open');
      allow write: if (request.auth != null && isAdmin()) || (resource.data.status == 'open');
    }
  }
}

import { defineStore } from 'pinia'

import {
  collection,
  getDocs,
  // เพิ่ม query กับ where เข้ามา
  query,
  where
} from 'firebase/firestore'

export const useUserProductStore = defineStore('user-product', {
  state: () => ({
    list: [],
    loaded: false,
    page: 1,
    limit: 2
  }),
  actions: {
    async loadProduct () {
      // เพิ่ม where และ query ในการเรียก condition ตาม rule
      const productsCol = query(collection(db, 'products'), where('status', '==', 'open'))
      const productSnapshop = await getDocs(productsCol)
      const productList = productSnapshop.docs.map(doc => doc.data())
      if (productList && productList.length > 0) {
        this.list = productList
      }
      this.loaded = true
    },
    /* function อื่นเหมือนเดิม */
  }
})