{"id":28028365,"url":"https://github.com/permitio/permit-prompt-filtering","last_synced_at":"2026-04-29T00:31:46.949Z","repository":{"id":278361144,"uuid":"935372123","full_name":"permitio/permit-prompt-filtering","owner":"permitio","description":"Filtering AI Prompts using Permit's fine-grained authorization and OpenAI classification of the prompts","archived":false,"fork":false,"pushed_at":"2025-02-20T05:50:40.000Z","size":25,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":4,"default_branch":"main","last_synced_at":"2025-05-11T07:11:19.714Z","etag":null,"topics":["example","openai"],"latest_commit_sha":null,"homepage":"","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/permitio.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2025-02-19T10:40:21.000Z","updated_at":"2025-03-13T15:59:35.000Z","dependencies_parsed_at":"2025-02-19T11:44:53.321Z","dependency_job_id":null,"html_url":"https://github.com/permitio/permit-prompt-filtering","commit_stats":null,"previous_names":["permitio/permit-prompt-filtering"],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/permitio%2Fpermit-prompt-filtering","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/permitio%2Fpermit-prompt-filtering/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/permitio%2Fpermit-prompt-filtering/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/permitio%2Fpermit-prompt-filtering/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/permitio","download_url":"https://codeload.github.com/permitio/permit-prompt-filtering/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":253528975,"owners_count":21922636,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["example","openai"],"created_at":"2025-05-11T07:11:22.053Z","updated_at":"2026-04-29T00:31:41.928Z","avatar_url":"https://github.com/permitio.png","language":"JavaScript","funding_links":[],"categories":[],"sub_categories":[],"readme":"# OpenAI + Permit.io Natural Language Access Control\n\nThis demo showcases building a dynamic access control system that combines OpenAI's natural language understanding with Permit.io's ABAC (Attribute-Based Access Control). The system intelligently classifies user requests and enforces permissions based on user attributes.\n\nRead the blog here: https://www.permit.io/blog/ai-prompt-classification-for-access-control\n\n## Overview\n\nThe system handles two types of access scenarios to demonstrate its flexibility:\n\n1. **Hotel Rate Access** (Complex attribute matching)\n   ```\n   \"What's the price of Hilton Budapest?\"\n   -\u003e Classifies as public rate if not specified\n   -\u003e Checks user attributes for special rates (IATA, premium)\n   ```\n\n2. **Financial Advice Access** (Simple opt-in validation)\n   ```\n   \"Help me with my investment strategy\"\n   -\u003e Classifies as financial advice request\n   -\u003e Checks if user has opted in for AI advice\n   ```\n\n## Prerequisites\n\n- Node.js installed\n- OpenAI API key\n- Permit.io account and API key\n\n## Setup\n\n1. Install dependencies:\n```bash\nnpm install openai permitio dotenv\n```\n\n2. Create a `.env` file:\n```env\nOPENAI_API_KEY=your_openai_key\nPERMIT_API_KEY=your_permit_key\nPERMIT_PDP_URL=your_pdp_url\n```\n\n3. Configure Permit.io:\n   - Create resource types:\n     - `HotelType` with `rateType` attribute\n     - `FinancialAdvice` (no attributes needed)\n   - Set up user attributes:\n     - `iata_membership` (boolean)\n     - `premium_member` (boolean)\n     - `ai_advice_opt_in` (boolean)\n\n## Project Structure\n\n```\n├── README.md\n├── package.json\n├── server.js\n└── src/\n    ├── classifier.js    # Generic OpenAI classifier\n    └── permit.js        # Permit.io access checks\n```\n\n## How It Works\n\n1. **Intelligent Request Classification**\n   - System understands user intent from natural language\n   - Handles explicit and implicit requests\n   - Defaults to appropriate values when details are missing\n   ```javascript\n   // Explicit: \"Show me the IATA rate for Hilton\"\n   {\n     resourceType: \"HotelType\",\n     resourceKey: \"hilton\",\n     attributes: { rateType: \"IATA\" }\n   }\n\n   // Implicit: \"What's the price of Hilton?\"\n   {\n     resourceType: \"HotelType\",\n     resourceKey: \"hilton\",\n     attributes: { rateType: \"public\" }\n   }\n   ```\n\n2. **Dynamic Permission Checks**\n   - ABAC policies based on user attributes\n   - Different validation patterns for different resources\n   ```javascript\n   // Hotel rates: Match rate type with user attributes\n   if (rateType === \"IATA\") requires user.iata_membership\n   if (rateType === \"premium\") requires user.premium_member\n\n   // Financial advice: Simple opt-in check\n   if (resourceType === \"FinancialAdvice\") requires user.ai_advice_opt_in\n   ```\n\n## Test Cases\n\nThe system handles various scenarios:\n\n1. **Basic Access Control**\n   - IATA agent accessing IATA rates\n   - Premium user accessing premium rates\n   - Regular user accessing public rates\n\n2. **Edge Cases**\n   - Ambiguous requests (defaults to public rates)\n   - Missing information (uses \"unknown\" key)\n   - Mixed requests (classifies primary intent)\n\n3. **Financial Advice**\n   - Opted-in users can access advice\n   - Regular users are denied\n   - Implicit advice requests are recognized\n\n## Example Output\n\n```\n🔍 TEST CASE: Ambiguous rate request\n👤 User: regular_user_1\n💭 Request: \"Show me the rates for Hilton\"\n\n📋 Classification: {\n  \"resourceType\": \"HotelType\",\n  \"resourceKey\": \"Hilton\",\n  \"attributes\": {\n    \"rateType\": \"public\"\n  }\n}\n\n🎯 Result: ALLOWED ✅\n```\n\n## Key Features\n\n1. **Generic Classification**\n   - No hardcoded rules or patterns\n   - OpenAI understands context and intent\n   - Handles ambiguous and implicit requests\n\n2. **Flexible Access Patterns**\n   - Complex attribute matching (hotel rates)\n   - Simple opt-in validation (financial advice)\n   - Easily extensible to new use cases\n\n3. **Natural Language Understanding**\n   - Users can request access naturally\n   - System infers missing details\n   - Handles various request formats\n\n## License\n\nMIT\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fpermitio%2Fpermit-prompt-filtering","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fpermitio%2Fpermit-prompt-filtering","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fpermitio%2Fpermit-prompt-filtering/lists"}