What is permissions-aware data filtering?

Permissions-aware data filtering is the process of fetching data based on a principal's access level. Instead of retrieving all the data and then filtering out unauthorized content, this approach fetches only the data the principal is allowed to access, ensuring efficiency and enhanced security.

Based on the access policies, Cerbos provides a list of conditions to apply in your data query, in order to only fetch the correct data points.

Permissions-aware data filtering with Cerbos

Use the Cerbos query plan to dynamically filter data retrieval according to your authorization policies. Based on the access policies, Cerbos provides a list of conditions to apply in your data query, in order to only fetch the correct data points.

• Efficient retrieval: Fetch only the necessary data, reducing the load on your databases and ensuring faster response times.
• Enhanced security: By only retrieving allowed data, you minimize the risk of accidental data leaks or exposure.
• Dynamic adjustments: As authorization policy changes, the filtering logic adjusts in real-time, ensuring up-to-date access control.
• Seamless integration: Cerbos' query plans can be mapped into your existing data fetching layer. Alternatively, use reference one of Cerbos' implementations for Prisma, SQLAlchemy, Mongoose.

Policies can be consistently applied across various layers of the technology stack:

• Data Layer: Controlling access to raw data in databases and data warehouses.
• API Layer: Enforcing permissions for data accessed programmatically.
• Application Layer: Enforcing access controls within software applications.
• AI Layer: Ensuring AI agents and chatbots respect user permissions.