Text-to-SQL Benchmarking Under Role-Based Access Control
A new benchmarking framework addresses the gap between text-to-SQL performance on standard benchmarks and real-world deployment under role-based access control (RBAC). Current benchmarks assume unrestricted database access, but in practice user queries are limited by RBAC policies. The proposed framework augments existing benchmarks with plausible user roles and access policies using an LLM-assisted workflow. It formulates role synthesis as a structured problem to generate realistic constraints. This work aims to evaluate how well LLMs handle SQL generation when data access is restricted, highlighting potential failures in both policy violations and missed permissible queries.
Key facts
- Text-to-SQL systems generate SQL queries from natural language questions and a database schema.
- Popular benchmarks assume unrestricted database access.
- Real-world access is often restricted via RBAC policies.
- The disconnect can cause LLMs to violate RBAC or reject valid queries.
- The framework augments existing benchmarks with user roles and access policies.
- Role synthesis is formulated as a structured problem.
- The workflow is LLM-assisted.
- The paper is on arXiv with ID 2607.22115.
Entities
—