What is permissions-aware data filtering?

Permissions-aware data filtering is the process of fetching data based on a principal's access level. Instead of retrieving all the data and then filtering out unauthorized content, this approach fetches only the data the principal is allowed to access, ensuring efficiency and enhanced security.

Based on the access policies, Cerbos provides a list of conditions to apply in your data query, in order to only fetch the correct data points.

Permissions-aware data filtering with Cerbos

• Efficient retrieval: Fetch only the necessary data, reducing the load on your databases and ensuring faster response times.
• Enhanced security: By only retrieving allowed data, you minimize the risk of accidental data leaks or exposure.
• Dynamic adjustments: As authorization policy changes, the filtering logic adjusts in real-time, ensuring up-to-date access control.
• Seamless integration: Cerbos' query plans can be mapped into your existing data fetching layer. Alternatively, use reference one of Cerbos' implementations for Prisma, SQLAlchemy, Mongoose.