Vector search is rapidly emerging as the next evolution of search, driven by Retrieval-Augmented Generation (RAG) workflows. However, securing these systems requires fine-grained access control beyond the capabilities of traditional methods like RBAC or PBAC. This talk explores how Relationship-Based Access Control (ReBAC), inspired by Google Zanzibar, provides a scalable and flexible solution for managing authorization in RAG and vector search.

We’ll cover how ReBAC enables pre- and post-filtering strategies to securely retrieve embeddings. Using live demos with tools like SpiceDB, LangChain, and Pinecone, you’ll see how to integrate ReBAC into your RAG pipelines. Whether you’re building RAG workflows or exploring vector search, this session offers practical insights to secure and optimize your applications.

https://github.com/authzed/examples/blob/main/notebooks/rag.ipynb