Re: Two-phase commit security restrictions - Mailing list pgsql-hackers

From David Garamond
Subject Re: Two-phase commit security restrictions
Date
Msg-id 416DE84B.9040507@zara.6.isreserved.com
Whole thread Raw
In response to Re: Two-phase commit security restrictions  (Oliver Jowett <oliver@opencloud.com>)
Responses Re: Two-phase commit security restrictions
List pgsql-hackers
Oliver Jowett wrote:
> Heikki Linnakangas wrote:
> 
>> Another approach I've been thinking about is to allow anyone that 
>> knows the (user-supplied) global transaction identifier to finish the 
>> transaction, and hide the gids of running transactions from regular 
>> users. That way, the gid acts as a secret token that's only known by 
>> the transaction manager, much like the cancel key.
> 
> Doesn't this break recovery? The TM needs to find all outstanding GIDs 
> for a particular resource.

Isn't it the TM's job to remember all the outstanding GIDs? But it would 
be nice to ask each RM too, I guess.

-- 
dave


pgsql-hackers by date:

Previous
From: Tatsuo Ishii
Date:
Subject: Re: [COMMITTERS] pgsql: Fix breakage in hashjoin from recent
Next
From: Oliver Jowett
Date:
Subject: Re: Two-phase commit security restrictions