Firestore Security Rules with Custom Claims: Role-Based Access Control in Firebase
Use Firebase Auth custom claims to embed roles in ID tokens, then enforce access in Firestore security rules via request.auth.token.role—avoiding extra document reads and quota costs. Includes Admin SDK setup, rule patterns, emulator testing, and deployment rollback.