title: Flutter/Firebase: Admin features in-app or cloud functions?
body: <p>I'm writing an app with Flutter and Firebase (using both Firestore, Storage and Authentication so far).</p>
  
  <p>Currently the app <em>shows content</em> from Firebase, but now I'm trying to figure out how the best way is to implement <em>writing/editing/removing stuff</em> in Firebase.</p>
  
  <p>The goal is to have users with admin privileges.</p>
  
  <p><strong>My question is</strong> if I can build an Admin Panel inside the client app (which would be ideal), or if that's considered bad practice and I should build an Admin Panel in another app and using Cloud Functions.</p>
  
  <p>For example, currently I perform Authentication (signup/register) in the Flutter/Dart code and when registering it creates a field in Firestore <code>isAdmin = false</code>, which I then can manually set to true (if I want) in the Firestore console. Could this somehow be an "unsafe" way of doing this?</p>