Disabling and enabling transaction committal in transactional application components5958004Abstract A run-time environment implemented as system services and component integration interfaces provides a capability for components of a component-based server application to reversibly disable committal of a transaction in which the component participates. On return from a call to the component which leaves the component's transactional work in an invalid state, the component can disable commit of the transaction so as to avoid premature committal of the component's transactional work. On return from a call to the component which renders the component's transactional work in a valid state, the component re-enables commit of the transaction. If committal of the transaction is initiated when any component in the transaction disables commit, the transaction is aborted. Claims We claim: Description FIELD OF THE INVENTION
______________________________________
HKBY.sub.-- CLASSES.sub.-- ROOT.backslash.CLSID.backslash.{AB077646-B902-1
1D0-B5BE-
00C04FB957D8}.backslash.LocalServer32 = C:.backslash.WINNT.backslash.Syste
m32.backslash.mtx.exe
/p:{DA16F24B-2B23-11D1-8116-00C04FC2F9C1}
______________________________________
When the server application component 86 is run in the execution environment 80, the transaction server executive 80 maintains a component context object 138 associated with the server application component 86. The component context object 138 provides context for the execution of the server application component 86 in the execution environment 80. The component context object 138 has a lifetime that is coextensive with that of the server application component. The transaction server executive 80 creates the component context object 138 when the server application component 86 is initially created, and destroys the component context object 138 after the application server component 86 is destroyed (i.e., after the last reference to the application server component is released). The component context object 138 contains intrinsic properties of the server application component that are determined at the component's creation. These properties include a client id, an activity id, and a transaction reference. The client id refers to the client program 134 that initiated creation of the server application component. The activity id refers to an activity that includes the server application component. An activity is a set of components executing on behalf of a base client, within which only a single logical thread of execution is allowed. The transaction reference indicates a transaction property object 150 that represents a transaction in which the server application component participates. The component context object 138 is implemented as a COM Object that runs under control of the transaction server executive. The component context object 138 provides an "IObjectContext" interface described in more detail below, that has member functions called by the server application component 86. In the illustrated execution environment, the transaction server executive 80 maintains an implicit association of the component context object 138 to the server application component 86. In other words, the transaction server executive 80 does not pass a reference of the component context object 138 to the client program 134 which uses the server application component 86. Rather, the transaction server executive 80 maintains the component's association with the context object, and accesses the component context object when needed during the client program's access to the server application component 86. Thus, the client program 134 is freed from explicitly referencing the component context object 138 while creating and using the server application component 86. With reference again to FIG. 2, the server computer 84 also runs a resource manager 140 and a resource dispenser 144. The resource manager 140 is a system service that manages durable data (e.g., data in a database 146). The server application component 86 can use the resource manager to maintain the durable state of the server application (such as, the record of inventory on hand, pending orders, and accounts receivable in an on-line sales server application). Examples of resource managers in the illustrated embodiment include the Microsoft SQL Server, durable message queues, and transactional file systems. Preferably, the resource manager 140 supports performing changes or updates by the server application component 86 to the server application's durable state on a transactional basis (i.e., in transactions conforming to the well-known ACID properties). The resource dispenser 144 is a service that manages non-durable shared state (i.e., without the guarantee of durability) on behalf of the server application components within the ASP 90. Examples of the resource dispenser 144 in the illustrated embodiment include an ODBC resource dispenser that maintains a pool of database connections conforming to the Microsoft Open Database Connectivity ("ODBC") call level interface. The ODBC resource dispenser allocates database connections to the server application component for accessing data from a database 146 (generally, through its resource manager 140). Also, the ODBC resource dispenser reclaims database connections when released by the server application components for later reuse. The illustrated execution environment 82 further includes a transaction manager 148. The transaction manger 148 is a system service that coordinates transactions that span multiple resource managers, including where the resource managers reside on more than one server computer in a distributed network. The transaction manager 148 ensures that updates across all resources managers involved in a transaction occur in conformance with the ACID properties using the well known two-phase commit protocol, regardless of failures (e.g., computer or network hardware or software failures, or errors caused by a misbehaved resource manager or application), race conditions (e.g., a transaction that starts to commit while one resource manager initiates an abort), or availability (a resource manager prepares a transaction but never returns). The illustrated transaction manager 148 is the Microsoft Distributed Transaction Coordinator (MSDTC) released as part of Microsoft SQL Server 6.5. Transaction Processing with Server Application Components The illustrated execution environment 80 also provides support for transaction processing conforming to the ACID properties and using the well known two phase commit protocol. In the illustrated execution environment 80, one or more server application components that participate in a transaction (i.e., an atomic unit of work that is either done in its entirety or not at all) will each have a transaction property object 150 associated with their component context object 136 to represent the transaction. The transaction server executive 80 creates the transaction property object 150 when the transaction is initiated, and associates the transaction property object with the component context object of each server application component in the transaction. While the server application component 86 is associated with the transaction property object 150, the transaction server executive automatically associates the transaction property object 150 with any other server application object that is created by the server application component 86 or resource that is obtained by the server application component 86. For example, a money transfer operation in an on-line banking server application can be implemented in a "transfer" server application component that creates two "account" server application components to debit and credit the transferred amount to the affected accounts. Thus, when the transfer component creates the account components, the transaction server executive automatically associates the account components with the transfer component's transaction property object so that work of the individual account component in the money transfer is performed as a single atomic action. Also, any resources obtained by the server application component 86 from the resource manager 140 or resource dispenser 144 are associated with the component's transaction property object 150 so that services performed by the resource manager or dispenser on the component's behalf also are encompassed within the transaction. For example, when the server application component 86 allocates a database connection using the ODBC Resource Dispenser while associated in a transaction, the connection is automatically enlisted on the transaction. All database updates using the connection become part of the transaction, and are either atomically committed or aborted. Transaction Attribute In addition to registering COM attributes and the transaction server execution attribute in the system registry, the server application component 86 also is registered in a transaction server catalog 136. The transaction server catalog 136 is a configuration database that stores the attributes of the server application component 86 related to execution of the component in the illustrated execution environment 80. These attributes include a transaction attribute that represents the server application components transactional expectations, and controls participation of the server application component in transaction processing under the illustrated execution environment 80. In the illustrated embodiment, the server application component's attributes can be modified by a system administrator or like user using the transaction server explorer utility which provides a component property sheet (a graphical user interface dialog) with user interface controls for setting the attributes. The component's transaction attribute can be declared as one of the values, "not supported," "supported," "required," or "requires new." The not supported value of the transaction attribute indicates the component should not be run in the scope of a transaction. This value is a default setting, and is primarily intended for use with COM objects that are not specifically designed to execute in the illustrated execution environment (such as those that predate the invention). The supported value indicates the component can execute in the scope of their client's transaction. The supported value typically is assigned to a server application component when the work of the component alone need not be in a transaction, such as where the component itself performs only a single database update. But, the components work also can form part of a transaction, such as where the component's database update is made in combination with those of other components. In the above mentioned example of a banking application that provides a debit account component, a credit account component and transfer component, the debit account component and credit account component are examples of components that each implement only a single database update (i.e., a credit or debit to an account balance in a database record). The debit and credit account components can be used in operations where a transaction is not required, such as a deposit or withdrawal operation involving only the components single database update. As mentioned above, the transfer component also uses the debit and credit account components in a money transfer operation between two accounts which involves multiple database updates (i.e., the debit by the debit account component and credit by the credit account component). In such case, the debit and credit account components should both execute within the transfer components transaction so that the updates occur as an atomic unit of work. The debit and credit account components thus have the transactional expectation that they execute in the scope of their client's transaction, if any, which is represented by assigning the "supported value" to their transaction attribute. The required value, on the other hand, indicates the component must execute within the scope of a transaction (either their client's transaction or a new transaction if their client has no transaction). The required value typically is assigned to components that perform multiple database updates, and require a transaction to ensure the updates are effected atomically. In the above mentioned banking application example, the transfer component implements a money transfer operation involving multiple database updates (i.e., the debit and credit performed by the debit and credit account components) which must be effected atomically. The transfer component thus has the transactional expectation that its work must be in a transaction, which is represented by assigning the required value as its transaction attribute. In the illustrated execution environment 82, both the supported and required values allow the server application component to be run in the client's transaction. In other words, if the client program 134 that requested creation of the server application component has a transaction, the server application component is run in the client's transaction. The difference between the values occurs when the component's client has no transaction. When the transaction attribute is supported and the component's client has no transaction, the server application component also executes without a transaction. When the transaction attribute is required and the component's client has no transaction, the transaction server executive initiates and executes the component in a new transaction. The requires new value of the transaction attribute indicates the component must execute in a new transaction even if the component's client has a transaction. This causes the transaction server executive 80 to always create an independent transaction for the component. The requires new transaction attribute value can be used, for example, with an auditing component that records work done on behalf of another transaction regardless of whether the original transaction commits or aborts. Automatic Transactions With reference to FIG. 4, the transaction server executive 80 automatically provides a transaction for the server application component 86 in a method 170 according to the component's transactional expectations (i.e., transaction attribute) without client control. As indicated at step 172, the method 170 commences when the client program 134 initially requests creation of an instance of the server application component. (There are various ways for the client program 134 to make this request as discussed more fully in a following section, entitled "Creating The Server Application Component." However, the transaction server executive 80 follows the method 170 in each case.) Upon receiving the client program's request to instantiate the server application component, the transaction server executive 80 creates the component context object 138 for the server application component 86 at a step 173. At a step 174, the transaction server executive 80 sets the client id and activity id data properties of the component context object 138 to indicate the client program 134 and activity associated with the client program, respectively. The transaction server executive 80 next sets the component context object's transaction data property in steps 175-181. At step 175, the transaction server executive 80 checks the transaction attribute registered for the server application component 138 in the catalog 136. As discussed above, the transaction attribute represents the transactional expectations of the server application component 86. If the transaction attribute is set to not supported, the transaction server executive 80 sets the transaction data property of the component context object 138 to a null transaction reference at step 176, which means the server application component is not part of a transaction. However, if the transaction attribute check at step 175 shows that the transaction attribute is registered as supported, the transaction server executive 80 further checks at step 177 whether the client program 134 has a transaction. If so, the transaction server executive 80 at step 178 sets the transaction data property of the component context object 134 to reference the client program's transaction (more specifically, to reference the transaction context object that represents the client program's transaction). As discussed above, this results in the server application component running under control of the transaction, such that the server application component's work (i.e., database updates) is committed or aborted with the transaction. However, if the check at step 177 indicates the client program 134 does not have a transaction, the transaction server executive 80 sets the transaction data property of the component context object 138 to a null transaction reference at step 176, which results in the server application component running outside the scope of a transaction and the component's work succeeds or fails on an individual basis. On the other hand, if the transaction attribute check at step 175 shows the transaction attribute is registered as required, the transaction server executive 80 at a step 179 further checks whether the client has a transaction. This time, if the client has a transaction, the transaction server executive 80 also proceeds to set the component context object's transaction data property to reference the client program's transaction at step 178. However, if the client program 134 does not have a transaction, the transaction server executive 80 instead creates a new transaction context object to represent a new transaction at a step 180 and sets the transaction data property to reference the new transaction at a step 181. Otherwise, when the transaction attribute check at step 175 shows the server application component's transaction attribute is registered as requires new, the transaction server executive 80 directly proceeds to create the new transaction and set the transaction data property to reference the new transaction in steps 180-181. The transaction server executive 80 finally returns a safe reference to the client program at a step 182 with which the client program can invoke member functions of the server application component 86 as discussed below in the section entitled "Safe References". Thus, according to the method 170, the transaction server executive 80 automatically provides a transaction encompassing the server application component's work when the component's transaction attribute indicates a transaction is required and the client program has not initiated a transaction (as shown in steps 175, 179-181). Also, the transaction server executive 80 automatically provides a transaction independent of the client program where the component's transaction attribute (i.e., "requires new") indicates a separate transaction is expected (as shown in steps 175, 180-181). However, where the component's transactional expectations allow the component to execute in a transaction under control of the client program (e.g., the "supported" and "required" transaction attribute) and the client program has initiated a transaction, the transaction server executive 80 runs the server application component in the client-controlled transaction. Controlling Transaction Outcome In the illustrated execution environment 82 (FIG. 2), the transaction manager 148 decides the outcome of a transaction based on success or failure of the work done by the transaction's participants, and completes the transaction accordingly (either aborting or committing) so as to conform to the ACID principles. Participants in the transaction can affect the transaction outcome in various ways. Client Control of Transaction Outcome A base client (i.e., where the client program 134 of the server application component 86 executes outside the execution environment 82 as illustrated in FIG. 2) can control transaction outcome in the illustrated execution environment using a transaction context object (not shown). The transaction context object provides an ITransactionContext interface (described below) through which the client program 134 controls the transaction. The client program 134 calls member functions of this interface to create server application components that participate in a transaction (the "CreateInstance" member function), and to commit or abort the transaction (the "Commit" and "Abort" member functions). The transaction context object has its transaction attribute set to required, or alternatively requires new, such that the transaction server executive automatically initiates a transaction for the object when created. The implementation of the commit and abort member functions in the transaction context object call the IObjectContext::SetComplete and IObjectContext::SetAbort functions, respectively, to cause an attempt to commit or abort the transaction as described below under the Completion of Automatic Transactions section. Server Application Component Control of Transaction Outcome The server application component 86, on the other hand, can affect the outcome of a transaction using "SetComplete," "SetAbort," "EnableCommit and DisableCommit" member functions (described in more detail below) of its component context object's IObjectContext interface. When the server application component 86 has done its portion of the work in a transaction, the component calls either the SetComplete or SetAbort member functions. By calling the SetComplete member function, the server application component 86 indicates its work in the transaction is done satisfactorily. On the other hand, the server application component 86 calls the SetAbort member function to indicate that its processing in the transaction is done, but the work could not be completed successfully and must be aborted. For example, a debit account component in a server application which updates an account from which money is transferred in a money transfer transaction may call SetComplete when the update leaves a positive balance in the account, but calls SetAbort when the update would leave a negative account balance. The call to SetAbort in this case also causes other work in the transaction to be "rolled back," such work by a credit account component to add the transfer amount to the transferee account. Enabling And Disabling Committal of a Transaction In accordance with the invention, the server application component 86 additionally can affect the outcome of a transaction by calling the DisableCommit function of its component context object 136. The DisableCommit function call prevents the client from committing the transaction (referred to as "disabling commit"). This allows a server application component that is stateful to prevent premature committal of incomplete work when returning from a call from the client to the server application component. If the client 134 attempts to commit the transaction in which a server application component has disabled commit, the transaction server executive 80 causes the transaction to abort. For example, where a valid update to an orders database is required to include both an order header and at least one order item, a server application component (hereafter the "order component") that generates updates to the database may have an AddHeader function and an AddItem function that the client calls to set header information and order items, respectively, for an update. When returning from a call to the AddHeader function where no order item has yet been added, the order component can call the DisableCommit function of its component context object 136 to disable commit in a transaction that encompasses the update. Likewise, when returning from a call to the AddItem function where no order header has yet been added, the order component can call the DisableCommit function to disable commit in the transaction. This prevents the client from committing the transaction while the order component's update is not yet valid. Later, the server application component 86 can call the EnableCommit function of its component context object 136 to again allow the client to commit the transaction involving the server application component. The EnableCommit call indicates the server application component's work is in a valid state that may be committed, and not that the component's work in the transaction is necessarily done. Thus, in the forgoing order component example, the order component can call the EnableCommit function upon return from a call to either the AddHeader or AddItem function where the update has both an order header and at least one order item. The order component's work in the transaction isn't necessarily done at that point since the client may again call the AddItem function to add additional order items to the update. In the illustrated execution environment 82, the component context object 136 maintains a "work state" value which indicates a state of work of its associated server application component 86 in the transaction. Initially, the work state value indicates an enable commit state. The component context object 136 sets the work state value to indicate a disable commit state in response to the component's call to the DisableCommit function. In response to the EnableCommit or SetComplete functions, the component context object 136 resets the work state value to indicate the enable commit state. Example of Enabling and Disabling Commit in Transaction Processing FIGS. 4-6 show an example of method steps performed in a client process (FIG. 4), server application component (FIG. 5), and transaction manager (FIG. 6) in the illustrated execution environment 82 (FIG. 2), which make use of the IObjectContext::EnableCommit and IObjectContext::DisableCommit functions to avoid premature committal of the server application component's work in accordance with the invention. In the illustrated example, the client program 134 (FIG. 2) creates the server application component 86 (FIG. 2) to perform a portion of the work in a transaction. The transaction manager 148 (FIG. 2) manages the outcome of the transaction. With reference to FIG. 4, the client program 134 executes steps 200-202 during processing of a transaction. At step 200, the client program 134 creates the server application component 86 within the context of the transaction, such as by calling the ITransactionContext::CreateInstance function described above. This causes the server application component to be automatically associated with the transaction, such that any work done by the component (e.g., updates to the database 146 managed by the resource manager 140) is either committed or aborted by the transaction manager 148 with the transaction. At step 201, the client program 134 invokes member functions of the server application component 86 to have the server application component perform a portion of the work in the transaction. Depending on the particular server application component and work to be performed, the client program 134 may call one or more of the server application component's member functions in step 201. In the foregoing order component example, for instance, the client program 134 may call an AddHeader function to set header information for the order, an AddItem function to add an individual order item to the order, and a SubmitOrder function when the order is complete. In response to the client's calls, the server application component 86 performs the requested work, and preferably also utilizes the EnableCommit and DisableCommit functions to avoid premature committal as shown in FIG. 5 and described below. At a later step 202, the client program 134 commits the transaction, such as by calling the ITransactionContext::Commit function. This causes the transaction manager 148 to commit the work of the server application component (and of any other components in the transaction) unless any components in the transaction have disabled commit or aborted as shown in FIG. 6 and described below. With reference to FIG. 5, the server application component 86 responds to calls from the client program 134 in step 201 of FIG. 4 by executing the steps 210-218. At step 210, the server application component 86 performs the portion of the work requested by the client program's call. In the above order component example, for instance, the order component at step 210 responds to an AddHeader call by generating an order header, or generates an order item in response to an AddItem call. When returning from the call after performing the requested work, the server application component 86 may call one of the SetAbort, SetComplete, EnableCommit or DisableCommit functions on the IObjectContext interface of its component context object 136 (FIG. 2). As indicated at steps 211-212, the server application component 86 calls the SetAbort function in the event of a failure in the requested work. The conditions for failure depend on the business function implemented in the server application component 86. In the above money transfer example, for instance, the account component calls the SetAbort function if the requested money transfer would have resulted in a negative account balance. For another example, the account component also calls the SetAbort function if the account is closed. This causes the transaction manager 148 to abort the transaction, and roll back all work already performed in the transaction. Otherwise, if the server application component 86 successfully completes its work in the transaction, the component calls the SetComplete function as indicated in steps 213-214. Again, the conditions on which the component successfully completes work depend upon the business function implemented in the component. In the above order component example, for instance, the order component calls the SetComplete function on return from the clients call to the order component's SubmitOrder function. Still otherwise, if the server application component 86 returns from a client call without yet a failure or successful completion of work in the transaction, the server application component 86 calls either the EnableCommit or DisableCommit functions as indicated at steps 215-217. The server application component 86 calls the EnableCommit function if the component's work is in a valid state, where the work although not necessarily complete can be validly committed. Again, the conditions on which the component's work is valid depend upon the business function implemented in the component. In the order component example, for instance, the order component calls the EnableCommit function on return from the component's AddHeader or AddItem function if both a header and order item have been added. In that case, the order component's work is not necessarily complete because the client could again call the AddItem function to add additional order items. However, the component's work has already produced a valid order since the order contains both a header and at least one order item. On the other hand, the server application component calls the DisableCommit function at step 217 if its work is not yet in a valid state, but has not failed. This prevents the client program 134 from committing the component's not yet valid work on return from the client's call. In the order component example, for instance, the order component calls the DisableCommit function on return from the component's AddHeader or AddItem function if there is not yet both an order header and at least one order item. The order component's work has not failed since the client program in a future call could add the missing header or first order item. Finally, at step 218, the server application component 86 returns from the client's call (step 201 of FIG. 4). The client program 134 can then make additional calls to the server application component at step 201, or commit the transaction at step 202 (FIG. 4). With reference now to FIG. 6, the transaction manager 148 controls committal of the transaction when initiated by the client program's call to the ITransactionContext::Commit function. During processing of the client program's commit request, the transaction manager 148 checks at step 230 whether any component participating in the transaction currently disables commit (i.e., the component called the DisableCommit function at step 217 of FIG. 5 and did not subsequently call the EnableCommit function). If commit is disabled by any component in the transaction, the transaction manager 148 aborts the transaction and rolls back each component's work at step 231. Otherwise, if commit is enabled by all components in the transaction, the transaction manager 148 commits each component's work in the transaction at step 232. Completion of Automatic Transactions In the illustrated execution environment 82 (FIG. 2), the transaction server executive 80 completes processing of a transaction that was initiated automatically by the transaction server executive to meet the server application component's transactional expectations (herein referred to as an "automatic transaction") when the server application component for which the automatic transaction was initiated completes its work. More specifically, the illustrated execution environment 82 provides an object integration interface (the IObjectContext interface supported on the component context object 138) with which the server application component 86 indicates to the transaction server executive 80 that its work is complete. The server application component 86 calls a SetComplete member function of this interface to indicate its work was successfully completed, and calls a SetAbort member function to indicate its work was completed but must be aborted. When next returning from the server application component after the component has called either of these functions, the transaction server executive 80 causes the transaction manager 148 to complete the transaction. If the SetComplete function was called, the transaction server executive 80 causes the transaction to be committed (as long as no other component or resource involved in the transaction has indicated to abort the transaction). If the SetAbort function was called, the transaction server executive 80 causes the transaction to be aborted. In the above discussed banking application for example, the transaction server executive 80 initiates an automatic transaction for the transaction component (whose transaction attribute is set to required because it performs two separate database updates using the credit and debit account components) if the transaction component's client program created the transaction component without initiating a transaction. The transaction component, in turn, creates the debit and credit account components to perform the withdrawal and deposit to the affected transferor and transferee accounts which form parts of the money transfer transaction. When created by the transaction server executive 80, the debit and credit account components (whose transaction attribute is set to supported because they perform only a single database update each) each automatically inherit the transaction from the transaction component. After each component completes its part of the work (which may occur over the course of several interactions or calls from the client program 134 to transaction component, and transaction component to debit and credit account components), the components call either the SetComplete or SetAbort function of their component context objects. Upon the transaction component returning from a client program call during which the transaction component indicated completion of its work using the SetComplete or SetAbort functions, the transaction server executive 80 completes the transaction. If the transaction component called the SetComplete function and no other transaction participant indicated the transaction was to be aborted (such as the credit account component calling the SetAbort function), the transaction server executive 80 causes the transaction manager to commit the transaction. Otherwise, the transaction server executive 80 completes the transaction by causing the transaction manager to abort the transaction. Overview of COM Object Instantiation in OLE As with other COM objects, the client program 134 (FIG. 2) must first request creation of an instance of the server application component 86 (FIG. 2) and obtain a reference to the server application component before the client program can access the functionality implemented by the server application component (i.e., before the client program can call member functions supported on an interface of the server application component). In Microsoft's OLE, a client program instantiates a COM object using services provided by OLE and a set of standard component interfaces defined by COM based on class and interface identifiers assigned to the component's class and interfaces. More specifically, the services are available to client programs as application programming interface (API) functions provided in the COM library, which is part of a component of the Microsoft Windows operating system in a file named "OLE32.DLL." Also in OLE, classes of COM objects are uniquely associated with class identifiers ("CLSIDs"), and registered by their CLSID in a system configuration database referred to as the "registry." The registry entry for a COM object class associates the CLSID of the class with information identifying an executable file that provides the class (e.g., a DLL file having a class factory to produce an instance of the class). Class identifiers are 128-bit globally unique identifiers ("GUID") that the programmer creates with an OLE service named "CoCreateGUID" (or any of several other APIs and utilities that are used to create universally unique identifiers) and assigns to the respective classes. The interfaces of a component additionally are associated with interface identifiers ("IIDs"). In particular, the COM library provides an API function, "CoCreateInstance," that the client program can call to request creation of a component using its assigned CLSID and an IID of a desired interface. In response, the CoCreateInstance API looks up the registry entry of the requested CLSID in the registry to identify the executable file for the class. The CoCreateInstance API function then loads the class' executable file, and uses the class factory in the executable file to create an instance of the COM object. Finally, the CoCreateInstance API function returns a pointer of the requested interface to the client program. The CoCreateInstance API function can load the executable file either in the client program's process, or into a server process which can be either local or remote (i.e., on the same computer or a remote computer in a distributed computer network) depending on the attributes registered for the COM object in the system registry. Once the client program has obtained this first interface pointer of the COM object, the client can obtain pointers of other desired interfaces of the component using the interface identifier associated with the desired interface. COM defines several standard interfaces generally supported by COM objects including the IUnknown interface. This interface includes a member function named "QueryInterface." The QueryInterface function can be called with an interface identifier as an argument, and returns a pointer to the interface associated with that interface identifier. The lUnknown interface of each COM object also includes member functions, AddRef and Release, for maintaining a count of client programs holding a reference (such as, an interface pointer) to the COM object. By convention, the IUnknown interface's member functions are included as part of each interface on a COM object. Thus, any interface pointer that the client obtains to an interface of the COM object can be used to call the QueryInterface function. Creating the Server Application Component With reference still to FIG. 2, the client program 134 can create the server application component 86 in the illustrated execution environment 80 in any of several ways. First, the client program 134 can create the server application component 86 using the CoCreateInstance API function or an equivalent method based on the CoGetClassObject API function and IClassFactory::CreateInstance function (which are a conventional COM API function and standard COM interface). The CoGetClassObject API function on the server computer 84 returns a reference to a class factory provided in the transaction server executive 80 when the system registry entry for the requested class includes the transaction server execution attribute described above. This allows the transaction server executive to participate in a subsequent call to the IClassFactory::CreateInstance function (such as by the CoCreateInstance API function) since the call is then made to the class factory in the transaction server executive. In response to this call, the implementation of the IClassFactory::CreateInstance function in the transaction server executive's class factory creates the component context object 138 of the server application component 86. The transaction server executive 80 later calls the IClassFactory::CreateInstance function of the class factory 122 in the server application DLL file 120 to create the server application component 86. While this first approach may suffice for many client programs, there are some significant limitations for the client program, including the inability of the client program to control the server application component in a transaction. While this first approach may suffice for many client programs, there are some significant limitations for the client program, including the inability of the client program to control the server application component in a transaction. Under the first approach, the transaction server executive 80 does not place the created server application component 86 in any transaction initiated or controlled by the client. Even though the client has not initiated a transaction for the server application component, the transaction server executive 80 still may automatically provide a transaction to meet the server application component's transactional expectations. Specifically, if the transaction attribute of the server application component 86 is set to either of the not supported or supported values, the transaction server executive 80 does not place the server application component in a transaction (the transaction data property of the server application component's component context object 138 does not contain a transaction reference). Otherwise, if the server application component's transaction attribute is set to either the required or requires new values, the transaction server executive 80 automatically initiates and places the server application component in a transaction (such as by creating the transaction context object 150 for a new transaction, and including a reference to the new transaction context object 150 in the server application component's component context object 138). Second, the server application component 86 can be created using the component context object of another component. The component context object provides an IObjectContext::CreateInstance member function which can be called to create other server application components that inherit context from the component context object (i.e., the component context objects created for the new components have the same context properties, including client id, activity id and transaction, as the original component context object). Except, in the special cases that the transaction attribute of the created server application component is "not supported" or "requires new," the transaction property is not inherited. For example, where a "transfer" component and two "account" components implement a money transfer operation in an on-line banking server application, the transfer component may create the two account components for the money transfer operation using its component object context. The account components automatically inherit properties from the transfer component's context and are included in the same transaction as the transfer component. In this second approach, the server application component accesses its component context object using a service of the transaction server executive, called the GetObjectContext API function (described below). Safe References When the server application component 86 is created using any of the three above described approaches, the server application component executes in the illustrated execution environment 80 under control of the transaction server executive 80. More specifically, the client program's call to the CoCreateInstance or IObjectContext::CreateInstance functions to initiate creating the server application component returns a reference to the server application component referred to as a "safe reference." References obtained through a call to the server application component's QueryInterface member function (described above) also are safe references. Thus, through use of the QueryInterface function, the client program 134 can obtain multiple safe references to various interfaces supported on the server application component. Also, the client program 134 can pass safe references to other client programs and server application components to allow such other clients to also use the server application component 86. Instead of being a direct pointer to the server application component's instance data structure 102 (FIG. 3) as are object references in COM, safe references refer indirectly to the server application component through the transaction server executive 80. Thus, calls made to the server application component's member functions using a safe reference always pass through the transaction server executive 80. This allows the transaction server executive to manage context switches, and allows the server application component to have a lifetime that is independent of the client program's reference to the component. The transaction server executive 80 tracks usage of all safe references to the server application component 86 through activation and deactivation, such that all safe references consistently refer to the current instance of the server application component when activated. When deactivated, a call using any safe reference to the server application component causes the transaction server executive to activate the server application component. So as to ensure that all calls are made to the server application component using a safe reference (i.e., so that the calls pass through the transaction server executive 80), the server application component 86 preferably is programmed to not pass to a client or other object any direct reference to itself outside of a QueryInterface call. Instead, the server application component can obtain a safe reference to itself to provide to clients using a SafeRef API function (described below) of the transaction server executive 80. Interfaces for Enabling and Disabling Transaction Committal With reference again to FIG. 2, the IObjectContext interface 139 is an interface of the system provided component context object 138. The IObjectContext interface 139 is used by the server application component 86 to create additional server application components, and to participate in the determination of transaction outcomes. The illustrated IObjectContext interface 139 has the following form (in the C programming language):
______________________________________
DECLARE.sub.-- INTERFACE.sub.-- (IObjectContext, IUnknown)
// IUnknown functions
HRESULT QueryInterface(THIS.sub.-- REFIID riid, LPVOID FAR*
ppvObj);
ULONG AddRef(THIS);
ULONG Release(THIS);
// IObjectContext functions
HRESULT CreateInstance(THIS.sub.-- REFCLSID relsid, REFIID
riid, LPVOID FAR* ppvObj);
HRESULT SetComplete(THIS);
HRESULT SetAbort(THIS);
HRESULT EnableCommit(THIS);
HRESULT DisableCommit(THIS);
BOOL IsInTransaction(THIS);
};
______________________________________
The EnableCommit function is called by the server application component 86 on return from a client call to indicate that the component allows its transactional updates to be committed in their present form. This is referred to as the enable commit state of the component, and is kept recorded in the component context object 136. The enable commit state is the initial default state of the server application, which remains in the enable commit state until the server application component indicates otherwise by calling DisableCommit, SetComplete, or SetAbort. The EnableCommit function returns a value to the caller as shown in the following table.
TABLE 1
______________________________________
EnableCommit return values
Value Description
______________________________________
S.sub.-- OK Transaction enabled for commit.
E.sub.-- FAIL A server failure occurred.
E.sub.-- UNEXPECTED
An unexpected error occurred.
______________________________________
The DisableCommit function is called by the server application component 86 as shown in FIG. 5 to indicate that the component will not allow its transactional updates to be committed in their present form. Any attempt to commit the transaction before the server application component 86 indicates otherwise (using either EnableCommit or SetComplete) will cause the transaction to abort. The DisableCommit function returns a value as shown in the following table 2.
TABLE 2
______________________________________
DisableCommit return values
Value Description
______________________________________
S.sub.-- OK Transaction disabled for commit.
E.sub.-- FAIL A server failure occurred.
E.sub.-- UNEXPECTED
An unexpected error occurred.
E.sub.-- NOCONTEXT
Not executing in a server application
component under control of the
transaction server executive 80.
______________________________________
Having described and illustrated the principles of our invention with reference to an illustrated embodiment, it will be recognized that the illustrated embodiment can be modified in arrangement and detail without departing from such principles. It should be understood that the programs, processes, or methods described herein are not related or limited to any particular type of computer apparatus, unless indicated otherwise. Various types of general purpose or specialized computer apparatus may be used with or perform operations in accordance with the teachings described herein. Elements of the illustrated embodiment shown in software may be implemented in hardware and vice versa. In view of the many possible embodiments to which the principles of our invention may be applied, it should be recognized that the detailed embodiments are illustrative only and should not be taken as limiting the scope of our invention. Rather, we claim as our invention all such embodiments as may come within the scope and spirit of the following claims and equivalents thereto.
|
Same subclass Same class Consider this |
||||||||||
