Re: Two-phase commit security restrictions

Oliver Jowett wrote:
> Heikki Linnakangas wrote:
> 
>> Another approach I've been thinking about is to allow anyone that 
>> knows the (user-supplied) global transaction identifier to finish the 
>> transaction, and hide the gids of running transactions from regular 
>> users. That way, the gid acts as a secret token that's only known by 
>> the transaction manager, much like the cancel key.
> 
> Doesn't this break recovery? The TM needs to find all outstanding GIDs 
> for a particular resource.

Isn't it the TM's job to remember all the outstanding GIDs? But it would 
be nice to ask each RM too, I guess.

-- 
dave