My rules look like this rules_version = '2'; service cloud.firestore { match /databases/{database}/documents { match /news/{storyId}{ allow read; } } } Code (markup): but when I try to read a list of 'news' I'm declined. For instance, if I use this in the playground: /databases/(default)/documents/news Code (markup): The rules seem pretty simple so I'm surprised by this. Any ideas where I've gone wrong?