title: Is it safe to manage security rules in flask views/functions instead of in firebase when using python flask with firebase storage?
body: <p>I'm pretty new to web development and I'm currently building a python flask web app and using:</p>
  <ul>
  <li>a postgres database on heroku</li>
  <li>flask-login for user authentication instead of firebase authentication</li>
  <li>firebase storage to store images uploaded by users</li>
  </ul>
  <p>As a user, I should:</p>
  <ul>
  <li>be able to read all images uploaded by all users</li>
  <li>only be able to edit or delete images that I've uploaded</li>
  </ul>
  <p>My questions:
  Is it safe to manage security rules through my python flask views/functions (i.e. instead of via the rules section in firebase) and simply set the storage 'allow read/write' security rules in firebase to 'if true'?</p>
  <p>If I set the firebase storage read/write security rules to 'if true', is it possible for a user/bad actor (i.e. that is not on my web app) to use CRUD operations on my firebase storage?</p>