aws-samples / bedrock-claude-chat

AWS-native chatbot using Bedrock + Claude (+Mistral)
MIT No Attribution
828 stars 304 forks source link

[Feature Request] Fine-grained user management #257

Open DTheunis opened 5 months ago

DTheunis commented 5 months ago

Describe the solution you'd like

We would like to be able to control the permissions of users so that we can prohibit/allow access to bots.

Also, bots that they are allowed to have should then by default be present in their botlist and would not need to be shared first.

Why the solution needed

Right now if you have multiple users who have need for different bots, they could theoretically access other bots which they should not be allowed to access. (In the case that they somehow find the link for a different bot) This could be a security risk in some cases.

Additional context

If we give User A access to Bot A, and User B access to Bot B. User A should not in any way be allowed to access the bot of user B and the other way around.

It would also be good if these bots are available when creating new users and giving them permissions to bots.

Implementation feasibility

Are you willing to discuss the solution with us, decide on the approach, and assist with the implementation?