Firebase uses rules like this for authN/Z checks, schema validation, and enforcing business logic. One of our DSLs is JSON based (https://firebase.google.com/do

Firebase uses rules like this for authN/Z checks, schema validation, and enforcing business logic. One of our DSLs is JSON based (https://firebase.google.com/docs/database/security/ https://firebase.google.com/docs/database/security/), while the other is more custom (https://firebase.google.com/docs/storage/security/ https://firebase.google.com/docs/storage/security/). Our console basically just uses text editors (sign up for free to check it out, as I can't find a good pic: https://console.firebase.google.com https://console.firebase.google.com), though we've considered tools like Blockly (https://developers.google.com/blockly/ https://developers.google.com/blockly/) for a more visual representation.