A stray commit buried multiple levels deep cost me months

(droppedasbaby.com)

26 points | by offbyone42 1 hour ago

8 comments

  • Groxx 8 minutes ago

        # transaction has been commented out
        # with transaction():
        db_models = DBAccess.fetch_records(ids)
        db_models[0].yo_mama_fat = True
        # request ends, data poofs into the ether
    
    tbh if this doesn't fail either immediately (no open transaction == error on modification attempt) or at GC time (if there's some kind of deferred logic), then I'd say this is an extremely bad framework and it does hold a major part of the blame. "You can mutate database-connected objects and sometimes they save back to the DB, sometimes they do not" is not reasonable behavior.

    (obviously these frameworks exist. quite a few of them. quantity does not in any way imply sanity.)

    > 2. DO NOT pass DB models in and out of the DB layer.

    Yea, the more I've used "thin" ORMs that give you plain objects, the more I've grown convinced they're the best choice basically all the time. Trying to be magical is cute, but it's guaranteed to be made of spicy unobtanium, and at some point it'll blow up in your face in an extremely convoluted way due to a simple cause that you'll notice is absolutely everywhere and you're just stuck being paranoid forever. There's no need to live like that.

  • magicalhippo 39 minutes ago
    I found the article very hard to follow. Then I read the domain name and it all made sense...

    Guess our pattern is different, not really felt the pain point the author is talking about. Or it's the language/framework, not sure whatever the example code is written in, but setting properties on entity records would never update the database in the ones I've used.

    When we did things more manually we'd make sure that methods like `create_main_records` would start a transaction if not in one, and only commit if it started the transaction. This way we could nest without worry. Our database supported nested transactions but using this pattern we didn't feel the need.

    • nine_k 16 minutes ago
      Tired: pass live DB model objects around, mutate them to accumulate random changes, call commit() five levels deep, experience the chaos as described by the author.

      Wired: fetch DB records and construct domain objects, pass them around, do mutation on the outermost level within an explicit transaction. (Typical best practice.)

      Inspired: "functional core, imperative shell".

  • Retr0id 1 hour ago
    > DO NOT blame the framework

    Why not? Why should I be allowed to db.commit() midway through a transaction?

    • Stitch4223 58 minutes ago
      With great power comes great responsibility.
      • Retr0id 56 minutes ago
        Well, I don't want either. Give me a safe API!
      • saghm 47 minutes ago
        Yes, and the people who designed that API clearly were not worthy of of the responsibility of providing it
      • UqWBcuFx6NV4r 56 minutes ago
        This is like people saying that C is infallible and it’s those stupid lesser-developers that unlike me simply cannot wield its immense power. No. Usability matters. After all these years software development still has an ‘unfounded male confidence / posturing’ problem and it’s just cringeworthy
        • hackthemack 47 minutes ago
          I agree. No matter how complicated, or unnecessary, or unintuitive a piece of software or technology is... There is always this contingent of people who pop in and say "It is not that hard!" and furthermore tend to express a view of "I am superior because I figured out this obtuse thing, and you must be inferior because you have not figured it out".

          I do not know why that mentality exists in the industry, but I see it all the time... for the past 35 years.

          • SoftTalker 9 minutes ago
            It exists in every industry. Listen to anyone in construction, carpenters, electricians, plumbers, etc.
    • jiggawatts 45 minutes ago
      Database engines I've worked with generally support nested transactions, so you can open a transaction, open another transaction, commit it, then roll back the outer transaction... and it's like nothing ever happened.

      This ability to compose transactions is their main benefit over other kinds of concurrency control!

      • manphone 25 minutes ago
        Many databases do not actually offer this or pretend to offer this, but it is really just one thing.
        • Groxx 13 minutes ago
          For those that don't, it's almost always modeled in the connection-library as "hold it open until commits == opens, or roll back if any roll back". Or it's often easy to build this yourself, around the library.

          Which works entirely fine in most cases. You're at greater risk of phantom reads and general "stuff that can occur while you hold open a transaction", but if you're not handling that correctly then you're not handling that correctly. It's only a matter of volume, not existence.

          ... with a clear exception for cases where you do need to truly end a transaction, like if you're relying on some other thread to do something on a different transaction that needs to see your changes, or when you risk a deadlock somewhere due to not releasing your lock. Those are both a risky patterns for a lot of reasons though, and worth avoiding at design-time if at all possible.

    • offbyone42 54 minutes ago
      Giving "I cut my finger with a knife, why is the knife so sharp?" energy. JKJK.

      I think the option should be there, but it needs to be used responsibly.

      • Retr0id 51 minutes ago
        What's the use case? I've never found myself wishing my transaction wasn't actually atomic.
      • p-e-w 30 minutes ago
        The option to make a transaction not be a transaction? What is it then?
  • hparadiz 44 minutes ago
    Feel like I've solved this non problem like 20 times.

    If your framework is holding your records in a collection and you keep track of phantoms that have been edited but not saved as they are edited then all this becomes a non issue. That way you do Collection->SaveTransaction or Collection->Save() and the collection does all the db commit, roll back nonsense.

    Anyway the examples I don't even know if I could call that an ORM. Use a better one.

  • eqvinox 48 minutes ago
    > # calls helpers that eventually call commit()

    Show, don't tell. The article should've included an example of these helpers.

    All in all, this feels poorly written, but also poorly thought out. The DB layer can and should throw an exception if you manually begin/commit inside a context manager. Please do blame it if it doesn't.

  • quamserena 50 minutes ago
    This is trivially preventable via affine types
  • khaledh 42 minutes ago
    If someone can trivially introduce bad state (or worse, data loss), then the API is clearly broken.
  • kburman 51 minutes ago
    [dead]