Restrict embed to elevated role

c0sogi / LLMChat

A full-stack Webui implementation of Large Language model, such as ChatGPT or LLaMA.

MIT License

245 stars 40 forks source link

Restrict embed to elevated role #14

Closed Torhamilton closed 1 year ago

Torhamilton commented 1 year ago

Possible abuse of shared memory if all authenticated user can embed text. Restrict embedding to admin/editor roles

c0sogi commented 1 year ago

Let's consider assigning a vector index to an individual in the next commit

Torhamilton commented 1 year ago

Yes good idea, mutes the need for in-browser db. However admin needs to be able to deploy app-wide embeddings available to all users. I opened another issue for admin UI

c0sogi commented 1 year ago

58c507453d63571071d33285b66a9bbb3667ebe2

Torhamilton commented 1 year ago

This is use case dependent. Maybe a switch to enable/disable for users. Some folks are just going to upload a catalog of books, I can see that happening. Also admin can't guarantee copyrighted works are not being embedded.