// Block destructive operations and file operations on a model
`@FirewallRules`({
blockDestructive: true,
blockFileOperations: true,
})
class SensitiveData extends Model { ... }
// Apply database-specific rules
`@FirewallRules`({
database: 'postgresql',
blockCodeExecution: true,
})
class UserDefinedFunction extends Model { ... }
// Custom rules
`@FirewallRules`({
rules: [
{ pattern: /^SELECT\s+FROM\s+logs/i, description: 'Block log access' },
],
})
class AuditLog extends Model { ... }
Decorator to apply firewall rules to a model class