c0sogi/LLMChat

Restrict embed to elevated role

Closed this issue · 4 comments

Possible abuse of shared memory if all authenticated user can embed text. Restrict embedding to admin/editor roles

c0sogi commented

Let's consider assigning a vector index to an individual in the next commit

Yes good idea, mutes the need for in-browser db. However admin needs to be able to deploy app-wide embeddings available to all users. I opened another issue for admin UI

This is use case dependent. Maybe a switch to enable/disable for users. Some folks are just going to upload a catalog of books, I can see that happening. Also admin can't guarantee copyrighted works are not being embedded.