Which clause prevents an INSERT or UPDATE through a view from producing rows that the view itself cannot select?