firebase rule to allow only read corresponding document by registered user

firebase read only by email

rules_version = '2';
service cloud.firestore {
  match /databases/{database}/documents {
    match /users/{userEmail} {
      allow read: if request.auth.token.email.lower() == userEmail.lower();
    }
  }
}