Securing RAG Pipelines with Fine Grained Authorization
summary
Explains why relationship-based access control (ReBAC) like Google Zanzibar must guard RAG pipelines and shows two concrete enforcement patterns: pre-filter authorization (lookup user’s allowed doc IDs from SpiceDB then query Pinecone) and post-filter authorization (retrieve nearest embeddings from Pinecone then check each doc against SpiceDB). Demo uses Langchain and OpenAI on two docs (IDs 123 and 456), proves removing Tim’s viewer relation hides the “50 paid holidays” answer, and cites Zanzibar’s 10M qps claim and SpiceDB’s 6,200 GitHub stars.
AI-written summary · about
chapters (31)
- 0:00Introduction
- 2:24Authentication vs authorization
- 4:14Relationship-based access control
- 5:17Google Zanzibar relationships
- 8:08Graph traversal for permissions
- 10:34Scaling Zanzibar at Google
- 11:57Zanzibar for RAG pipelines
- 12:41What is RAG
- 13:42LLM security risks
- 14:45RAG pipeline architecture
- 16:30Open-source Zanzibar tools
- 17:36What is SpiceDB and its use cases
- 19:01Post-filter authorization
- 20:28Pre-filter authorization
- 21:53Pre vs post filters
- 22:36Demo setup and schema
- 25:05Demo pre-filter execution
- 27:17Demo results
- 28:21Updating demo permissions
- 29:23Demo post-filter execution
- 31:10Production use cases
- 32:59Zanzibar benefits
- 33:42Zanzibar for AI agents
- 34:04Resources
- 34:48Q&A
- 35:11Q&A agents authorization
- 37:58Q&A hallucinations failures
- 39:23Q&A prompt engineering
- 40:48Q&A vector scalability
- 42:56Q&A SpiceDB naming
- 43:17Q&A Kubernetes
related talks
39mSecuring RAG Pipelines with Fine Grained Authorization
33mSecuring RAG Pipelines with Fine Grained Authorization
40mSecuring AI RAG Pipelines with Fine Grained Authorization
33mHow to Prevent AI Agents from Accessing Unauthorized Data
29mHow to Prevent AI Agents from Accessing Unauthorized Data
29mHow Google Built a Consistent, Global Authorization System with Zanzibar
30mFine-Grained Authorization: The Missing Piece in Agentic AI Security
47mFine Grained Authorisation with Relationship Based Access Control