I created a view with the MERGE algorithm to manage security. Everything is OK for INSERT, UPDATE and DELETE statement, the view is doing its job.
For REPLACE statement, if we know the value of the primary key, it is possible to replace rows that are not visible in the view. I can not find anything in the documentation that specifies that.
I joined the SQL file to create a small DB.
Here is the SQL query to use to replace row.
REPLACE view_test value (3,1,'ZZZZZ');
Is this normal? I think the view should be doing filter job here ...