Rest API "Apply Edits request" can theoretically edit/delete features which are not queryable due to layer definition query.It would help in building secure and robust services if it couldnt.
ref - https://community.esri.com/t5/arcgis-rest-api-questions/does-quot-apply-edits-request-quot-ignor-layer-definition-query/m-p/1066761#M3881
Thanks for posting this, and thanks again for bringing the issue to light.
Sign in to post, follow content, and more. New here? Register for free.