_ _ wrote:
1) D: is a local drive
2) "testUser" actually have security access. If I execute Notepad as "testUser", I can create this file in this folder.
3) I check that the folder exists.

Well, can you do some other tests such as:

+ Use os.access or os.exists to determine whether the
new user can see *anything* on the D: drive

+ Can the new user "read" an existing file from that
directory?

+ Can the new user write files in any *other* folder?

+ Can a *different* impersonated user create files?

This isn't a general problem: I can impersonate another
user and write a file to an arbitrary point on my
filesystem. You're going to have to narrow it down
to something which is particular about this case.

TJG
_______________________________________________
python-win32 mailing list
python-win32@python.org
http://mail.python.org/mailman/listinfo/python-win32

Reply via email to