Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-15934

It is possible to replace a row that is not in a view

    Details

      Description

      I created a view with the MERGE algorithm to manage security. Everything is OK for INSERT, UPDATE and DELETE statement, the view is doing its job.

      For REPLACE statement, if we know the value of the primary key, it is possible to replace rows that are not visible in the view. I can not find anything in the documentation that specifies that.

      I joined the SQL file to create a small DB.

      Here is the SQL query to use to replace row.
      REPLACE view_test value (3,1,'ZZZZZ');

      Is this normal? I think the view should be doing filter job here ...

      Thank you

        Attachments

          Activity

            People

            • Assignee:
              sanja Oleksandr Byelkin
              Reporter:
              philippejean Philippe Jean
            • Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

              • Created:
                Updated: