Cianplan

Level 5: AI / LLM systems · L5.2 RAG & vector databases

Permission-aware RAG

Propagate document ACLs into the index and filter at query time.

12 min · Pro

What you take away

  • Ingestion copies text out of systems that enforce who may read it into one index that does not — permissions have to be copied and applied deliberately.

And 3 more inside the class, in Pro.

How the class is laid out

  1. The problem
  2. The index is a copy with the locks removed
  3. Revocation, caching and the things that leak
  4. Why RAG
  5. Embeddings
  6. Indexes
  7. Ingestion
  8. Retrieval quality
  9. Permissions
  10. Check your understanding