A new benchmark for Text-to-SQL systems, released by a SIGMOD'27 paper, reveals that simply hiding restricted columns still allows models to answer questions they should refuse. The benchmark, named BIRD, showed that models could still answer 27% of restricted questions even when columns were hidden. The author of schemagate, a text-to-SQL access control tool, ran their system on this benchmark and found that schemagate achieved better results than the paper's best configuration, with no queries accessing unauthorized data. AI
IMPACT Highlights a critical vulnerability in current Text-to-SQL access control methods and demonstrates a more robust approach.
RANK_REASON The item describes the results of running a system on a newly released academic benchmark for Text-to-SQL systems. [lever_c_demoted from research: ic=1 ai=1.0]
AI-generated summary · Google Gemini · from 1 sources. How we write summaries →