The app can't opt out
EstiWright connects as a non-owner role with no BYPASSRLS. Even a bug in application code cannot return another tenant's rows.
app_rw · BYPASSRLS?false
app_rw · table owner?false
cross-tenant SELECT?0 rows
this is EstiWright
It's in the works.
EstiWright is in development — join the waitlist for early access.