add test for transaction isolation security