Restrict embed to elevated role
Closed this issue · 4 comments
Torhamilton commented
Possible abuse of shared memory if all authenticated user can embed text. Restrict embedding to admin/editor roles
c0sogi commented
Let's consider assigning a vector index to an individual in the next commit
Torhamilton commented
Yes good idea, mutes the need for in-browser db. However admin needs to be able to deploy app-wide embeddings available to all users. I opened another issue for admin UI
Torhamilton commented
This is use case dependent. Maybe a switch to enable/disable for users. Some folks are just going to upload a catalog of books, I can see that happening. Also admin can't guarantee copyrighted works are not being embedded.