Skip to content

docs: add SpiceDB integration for permission-aware RAG#3510

Open
sohanmaheshwar wants to merge 1 commit into
milvus-io:v3.0.xfrom
sohanmaheshwar:docs/spicedb-integration-v3.0
Open

docs: add SpiceDB integration for permission-aware RAG#3510
sohanmaheshwar wants to merge 1 commit into
milvus-io:v3.0.xfrom
sohanmaheshwar:docs/spicedb-integration-v3.0

Conversation

@sohanmaheshwar

Copy link
Copy Markdown

What does this PR do?

Adds a new integration guide: Permission-Aware RAG with Milvus and SpiceDB.

SpiceDB is an open-source, Google Zanzibar-inspired authorization system used by companies like OpenAI and Workday. This guide covers how to combine Milvus with SpiceDB to build a RAG pipeline that enforces fine-grained access control — so users only retrieve documents they're authorized to see.

Changes

  • site/en/integrations/integrate_with_spicedb.md — new integration page
  • site/en/menuStructure/en.json — adds SpiceDB entry under the Others section
  • assets/spicedb-architecture.png, spicedb-prefilter.png, spicedb-postfilter.png — architecture diagrams

Content summary

  • Background on Google Zanzibar and Relationship-Based Access Control (ReBAC)
  • How SpiceDB models permissions as a relationship graph
  • Milvus collection setup with a doc_id field as the link to SpiceDB resource IDs
  • Writing embeddings to Milvus and access relationships to SpiceDB in sync
  • Two retrieval strategies: pre-filter (LookupResources before vector search) and post-filter (batch CheckPermissions after retrieval)
  • langchain-spicedb integration for use with LangChain/LangGraph agents
  • Runnable local demo using Docker Compose

Adds a new integration guide covering how to build a permission-aware
RAG system using Milvus for vector search and SpiceDB for fine-grained,
Zanzibar-inspired access control. Covers pre-filter and post-filter
strategies, the langchain-spicedb integration, and a runnable demo.
@sre-ci-robot

Copy link
Copy Markdown

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: sohanmaheshwar

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@sre-ci-robot

Copy link
Copy Markdown

Welcome @sohanmaheshwar! It looks like this is your first PR to milvus-io/milvus-docs 🎉

@sohanmaheshwar

Copy link
Copy Markdown
Author

Hello @liyun95

Do you think this is good to get published? Let me know if there are any changes I need to make

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants