in
customer_orders
array-contains-any
array-contains
match /projects/{project} { allow read: if resource.data.status != "secret"; ... }
db.collection("projects").where("status", "in", ["public", "unlisted"]);
db.collection("projects").where("status", "in", ["public", "unlisted", "secret"]);