I\'m trying to implement role-based security for Cloud Firestore. Am I understanding correctly that users retrieving stories in Google\'s example at https://firebase.google.