storage.rules

rules_version = '2';

service firebase.storage {

  match /b/{bucket}/o {

    match /courses/{courseId}/{fileName} {

        allow read;

        allow write: if request.auth != null &&
                    request.resource.size < 5 * 1024 * 1024;

    }

  }

}