Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-15934

It is possible to replace a row that is not in a view

    XMLWordPrintable

Details

    Description

      I created a view with the MERGE algorithm to manage security. Everything is OK for INSERT, UPDATE and DELETE statement, the view is doing its job.

      For REPLACE statement, if we know the value of the primary key, it is possible to replace rows that are not visible in the view. I can not find anything in the documentation that specifies that.

      I joined the SQL file to create a small DB.

      Here is the SQL query to use to replace row.
      REPLACE view_test value (3,1,'ZZZZZ');

      Is this normal? I think the view should be doing filter job here ...

      Thank you

      Attachments

        Activity

          People

            sanja Oleksandr Byelkin
            philippejean Philippe Jean
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

            Dates

              Created:
              Updated:

              Git Integration

                Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.