The default rules require Authentication.
They allow full read and write access to authenticated users of your app. They are useful if you want data open to all users of your app but don't want it open to the world.
// These rules require authentication
{
"rules": {
".read": "auth != null",
".write": "auth != null"
}
}