**Why a Databricks App agent can hand a user rows they are not allowed to see, and the one setting that decides it.** Most writing about agent security is about what the agent can reach — which tables, which tools, which endpoints. The setting that d...