Qdrant Multi-User and Permissions

{
  "tenant_id": "client_acme",
  "workspace_id": "legal",
  "document_id": "contract-001",
  "page": 12,
  "visibility": "internal",
  "allowed_roles": ["admin", "legal"],
  "source": "contracts/contract-001.pdf"
}

from qdrant_client import QdrantClient, models

client = QdrantClient("http://localhost:6333")

filtro = models.Filter(
    must=[
        models.FieldCondition(
            key="tenant_id",
            match=models.MatchValue(value="client_acme"),
        ),
        models.FieldCondition(
            key="allowed_roles",
            match=models.MatchAny(any=["legal"]),
        ),
    ]
)

resultados = client.query_points(
    collection_name="documentos",
    query=[0.01, 0.02, 0.03],
    query_filter=filtro,
    limit=5,
)

Case:
- User A belongs to client_acme
- User B belongs to client_beta
- Both ask a similar question

Test:
1. Index documents with different tenant_id values.
2. Ask as User A.
3. Verify that no chunk from client_beta appears in the trace.