Open
Description
Describe the bug
Azure AI search permitted groups is not actually applied to the query filter. In backend settings.py file line 277 there permitted_groups_column property is declared
permitted_groups_column: Optional[str] = Field(default=None, exclude=True)
but it is marked as exclude=True, which means that it will not be used in the search filter
To Reproduce
Steps to reproduce the behavior:
- Go to Azure AI foundry Chat playground
- Click "Add your data" and select "Add a data source"
- Select properties related to your Azure AI search index
- On data management page tick "Enable document-level access control"
- Select column with Azure AD group ID-s
- Finish datasource setup
- Deploy website through Azure AI foundry Chat playground
- Try searching for materials you are not supposed to have access to
- Access control filter is not applied, GPT will output restricted documents
Expected behavior
Document-level access control is applied and restricted documents are included in search results.
Configuration: Please provide the following
- Azure OpenAI model name and version gpt-4o version 2024-11-20
- Is chat history enabled? No
- Are you using data? If so, what data source? Azure AI Search