title: Firebase Security rules for an app with multiple chat rooms
body: <p>I am having trouble imagining what the security rules would look like for an application that looks like this:</p>
  
  <ul>
  <li>One firebase with multiple chatrooms.</li>
  <li>A moderator authenticates via a separate PHP application.</li>
  <li>Moderators only have permission to modify their own chat room, they can read, write, update, and delete anything within their chat room.</li>
  <li>Guests arrive and authenticate via the separate PHP application.</li>
  <li>Guests have read and write access, but may not delete anything.</li>
  </ul>
  
  <p>My questions right now are these:</p>
  
  <ol>
  <li><p>Is it possible to configure the rules to meet all these requirements? Or are there some requirements that cannot possibly be met?</p></li>
  <li><p>To what extent does the PHP Server have to communicate with Firebase, in notifying Firebase of the existence of users?</p></li>
  </ol>