AI and LLMs · Middle · Question 7 of 75
Why must a RAG system filter documents by user permissions?
- 1Otherwise users can get answers drawn from documents they can't access
- 2Permissions make vector search much faster for each query
- 3Models refuse to read documents that have no owner set
Show the answer
Correct answer: Otherwise users can get answers drawn from documents they can't access
Explanation
Access control belongs in retrieval, using metadata filters per user or tenant. A prompt instruction is not a security boundary.