py2docfx 0.1.15rc2025477__py3-none-any.whl → 0.1.16.dev2052678__py3-none-any.whl

py2docfx/venv/venv1/Lib/site-packages/win32/Demos/security/localized_names.py

@@ -1,70 +0,0 @@
-# A Python port of the MS knowledge base article Q157234
-# "How to deal with localized and renamed user and group names"
-# https://www.betaarchive.com/wiki/index.php?title=Microsoft_KB_Archive/157234
-
-import sys
-
-import pywintypes
-from ntsecuritycon import (
-    DOMAIN_ALIAS_RID_ADMINS,
-    DOMAIN_USER_RID_ADMIN,
-    SECURITY_BUILTIN_DOMAIN_RID,
-    SECURITY_NT_AUTHORITY,
-)
-from win32net import NetUserModalsGet
-from win32security import LookupAccountSid
-
-
-def LookupAliasFromRid(TargetComputer, Rid):
-    # Sid is the same regardless of machine, since the well-known
-    # BUILTIN domain is referenced.
-    sid = pywintypes.SID()
-    sid.Initialize(SECURITY_NT_AUTHORITY, 2)
-
-    for i, r in enumerate((SECURITY_BUILTIN_DOMAIN_RID, Rid)):
-        sid.SetSubAuthority(i, r)
-
-    name, domain, typ = LookupAccountSid(TargetComputer, sid)
-    return name
-
-
-def LookupUserGroupFromRid(TargetComputer, Rid):
-    # get the account domain Sid on the target machine
-    # note: if you were looking up multiple sids based on the same
-    # account domain, only need to call this once.
-    umi2 = NetUserModalsGet(TargetComputer, 2)
-    domain_sid = umi2["domain_id"]
-
-    SubAuthorityCount = domain_sid.GetSubAuthorityCount()
-
-    # create and init new sid with acct domain Sid + acct Rid
-    sid = pywintypes.SID()
-    sid.Initialize(domain_sid.GetSidIdentifierAuthority(), SubAuthorityCount + 1)
-
-    # copy existing subauthorities from account domain Sid into
-    # new Sid
-    for i in range(SubAuthorityCount):
-        sid.SetSubAuthority(i, domain_sid.GetSubAuthority(i))
-
-    # append Rid to new Sid
-    sid.SetSubAuthority(SubAuthorityCount, Rid)
-
-    name, domain, typ = LookupAccountSid(TargetComputer, sid)
-    return name
-
-
-def main():
-    if len(sys.argv) == 2:
-        targetComputer = sys.argv[1]
-    else:
-        targetComputer = None
-
-    name = LookupUserGroupFromRid(targetComputer, DOMAIN_USER_RID_ADMIN)
-    print(f"'Administrator' user name = {name}")
-
-    name = LookupAliasFromRid(targetComputer, DOMAIN_ALIAS_RID_ADMINS)
-    print(f"'Administrators' local group/alias name = {name}")
-
-
-if __name__ == "__main__":
-    main()

py2docfx/venv/venv1/Lib/site-packages/win32/Demos/security/lsaregevent.py

@@ -1,14 +0,0 @@
-import win32event
-import win32security
-
-evt = win32event.CreateEvent(None, 0, 0, None)
-win32security.LsaRegisterPolicyChangeNotification(
-    win32security.PolicyNotifyAuditEventsInformation, evt
-)
-print("Waiting for you change Audit policy in Management console ...")
-ret_code = win32event.WaitForSingleObject(evt, 1000000000)
-## should come back when you change Audit policy in Management console ...
-print(ret_code)
-win32security.LsaUnregisterPolicyChangeNotification(
-    win32security.PolicyNotifyAuditEventsInformation, evt
-)

py2docfx/venv/venv1/Lib/site-packages/win32/Demos/security/lsastore.py

@@ -1,12 +0,0 @@
-import win32security
-
-policy_handle = win32security.GetPolicyHandle("", win32security.POLICY_ALL_ACCESS)
-privatedata = "some sensitive data"
-keyname = "tmp"
-win32security.LsaStorePrivateData(policy_handle, keyname, privatedata)
-retrieveddata = win32security.LsaRetrievePrivateData(policy_handle, keyname)
-assert retrieveddata == privatedata
-
-## passing None deletes key
-win32security.LsaStorePrivateData(policy_handle, keyname, None)
-win32security.LsaClose(policy_handle)

py2docfx/venv/venv1/Lib/site-packages/win32/Demos/security/query_information.py

@@ -1,25 +0,0 @@
-import win32api
-import win32security
-import winerror
-from ntsecuritycon import TOKEN_QUERY, TokenUser
-
-
-# This is a Python implementation of win32api.GetDomainName()
-def GetDomainName():
-    try:
-        tok = win32security.OpenThreadToken(win32api.GetCurrentThread(), TOKEN_QUERY, 1)
-    except win32api.error as details:
-        if details[0] != winerror.ERROR_NO_TOKEN:
-            raise
-        # attempt to open the process token, since no thread token
-        # exists
-        tok = win32security.OpenProcessToken(win32api.GetCurrentProcess(), TOKEN_QUERY)
-    sid, attr = win32security.GetTokenInformation(tok, TokenUser)
-    win32api.CloseHandle(tok)
-
-    name, dom, typ = win32security.LookupAccountSid(None, sid)
-    return dom
-
-
-if __name__ == "__main__":
-    print("Domain name is", GetDomainName())

py2docfx/venv/venv1/Lib/site-packages/win32/Demos/security/regsave_sa.py

@@ -1,61 +0,0 @@
-fname = "h:\\tmp.reg"
-
-import os
-
-import ntsecuritycon
-import pywintypes
-import win32api
-import win32con
-import win32security
-
-## regsave will not overwrite a file
-if os.path.isfile(fname):
-    os.remove(fname)
-
-new_privs = (
-    (
-        win32security.LookupPrivilegeValue("", ntsecuritycon.SE_SECURITY_NAME),
-        win32con.SE_PRIVILEGE_ENABLED,
-    ),
-    (
-        win32security.LookupPrivilegeValue("", ntsecuritycon.SE_TCB_NAME),
-        win32con.SE_PRIVILEGE_ENABLED,
-    ),
-    (
-        win32security.LookupPrivilegeValue("", ntsecuritycon.SE_BACKUP_NAME),
-        win32con.SE_PRIVILEGE_ENABLED,
-    ),
-    (
-        win32security.LookupPrivilegeValue("", ntsecuritycon.SE_RESTORE_NAME),
-        win32con.SE_PRIVILEGE_ENABLED,
-    ),
-)
-ph = win32api.GetCurrentProcess()
-th = win32security.OpenProcessToken(
-    ph, win32security.TOKEN_ALL_ACCESS | win32con.TOKEN_ADJUST_PRIVILEGES
-)
-win32security.AdjustTokenPrivileges(th, 0, new_privs)
-my_sid = win32security.GetTokenInformation(th, ntsecuritycon.TokenUser)[0]
-
-hklm = win32api.RegOpenKey(
-    win32con.HKEY_LOCAL_MACHINE, None, 0, win32con.KEY_ALL_ACCESS
-)
-skey = win32api.RegOpenKey(hklm, "SYSTEM", 0, win32con.KEY_ALL_ACCESS)
-
-sa = pywintypes.SECURITY_ATTRIBUTES()
-sd = pywintypes.SECURITY_DESCRIPTOR()
-sa.SECURITY_DESCRIPTOR = sd
-acl = pywintypes.ACL()
-
-pwr_sid = win32security.LookupAccountName("", "Power Users")[0]
-acl.AddAccessAllowedAce(
-    win32con.ACL_REVISION,
-    win32con.GENERIC_READ | win32con.ACCESS_SYSTEM_SECURITY,
-    my_sid,
-)
-sd.SetSecurityDescriptorDacl(1, acl, 0)
-sd.SetSecurityDescriptorOwner(pwr_sid, 0)
-sa.bInheritHandle = 1
-assert sa.SECURITY_DESCRIPTOR is sd
-
-win32api.RegSaveKey(skey, fname, sa)

py2docfx/venv/venv1/Lib/site-packages/win32/Demos/security/regsecurity.py

@@ -1,36 +0,0 @@
-import ntsecuritycon
-import win32api
-import win32con
-import win32security
-
-new_privs = (
-    (
-        win32security.LookupPrivilegeValue("", ntsecuritycon.SE_SECURITY_NAME),
-        win32con.SE_PRIVILEGE_ENABLED,
-    ),
-    (
-        win32security.LookupPrivilegeValue("", ntsecuritycon.SE_TCB_NAME),
-        win32con.SE_PRIVILEGE_ENABLED,
-    ),
-)
-ph = win32api.GetCurrentProcess()
-th = win32security.OpenProcessToken(
-    ph, win32security.TOKEN_ALL_ACCESS | win32con.TOKEN_ADJUST_PRIVILEGES
-)
-
-win32security.AdjustTokenPrivileges(th, 0, new_privs)
-hkey = win32api.RegOpenKey(
-    win32con.HKEY_LOCAL_MACHINE, None, 0, win32con.KEY_ALL_ACCESS
-)
-win32api.RegCreateKey(hkey, "SYSTEM\\NOTMP")
-notmpkey = win32api.RegOpenKey(
-    hkey, "SYSTEM\\notmp", 0, win32con.ACCESS_SYSTEM_SECURITY
-)
-
-tmp_sid = win32security.LookupAccountName("", "tmp")[0]
-sacl = win32security.ACL()
-sacl.AddAuditAccessAce(win32security.ACL_REVISION, win32con.GENERIC_ALL, tmp_sid, 1, 1)
-
-sd = win32security.SECURITY_DESCRIPTOR()
-sd.SetSecurityDescriptorSacl(1, sacl, 1)
-win32api.RegSetKeySecurity(notmpkey, win32con.SACL_SECURITY_INFORMATION, sd)

py2docfx/venv/venv1/Lib/site-packages/win32/Demos/security/sa_inherit.py

@@ -1,8 +0,0 @@
-import pywintypes
-import win32security
-
-sa = pywintypes.SECURITY_ATTRIBUTES()
-tmp_sid = win32security.LookupAccountName("", "tmp")[0]
-sa.SetSecurityDescriptorOwner(tmp_sid, 0)
-sid = sa.SECURITY_DESCRIPTOR.GetSecurityDescriptorOwner()
-print(win32security.LookupAccountSid("", sid))

py2docfx/venv/venv1/Lib/site-packages/win32/Demos/security/security_enums.py

@@ -1,336 +0,0 @@
-import ntsecuritycon
-import win32security
-import winnt
-
-
-class Enum:
-    def __init__(self, *const_names):
-        """Accepts variable number of constant names that can be found in either
-        win32security, ntsecuritycon, or winnt."""
-        for const_name in const_names:
-            try:
-                const_val = getattr(win32security, const_name)
-            except AttributeError:
-                try:
-                    const_val = getattr(ntsecuritycon, const_name)
-                except AttributeError:
-                    try:
-                        const_val = getattr(winnt, const_name)
-                    except AttributeError:
-                        raise AttributeError(
-                            'Constant "%s" not found in win32security, ntsecuritycon, or winnt.'
-                            % const_name
-                        )
-            setattr(self, const_name, const_val)
-
-    def lookup_name(self, const_val):
-        """Looks up the name of a particular value."""
-        for k, v in self.__dict__.items():
-            if v == const_val:
-                return k
-        raise AttributeError("Value %s not found in enum" % const_val)
-
-    def lookup_flags(self, flags):
-        """Returns the names of all recognized flags in input, and any flags not found in the enum."""
-        flag_names = []
-        unknown_flags = flags
-        for k, v in self.__dict__.items():
-            if flags & v == v:
-                flag_names.append(k)
-                unknown_flags &= ~v
-        return flag_names, unknown_flags
-
-
-TOKEN_INFORMATION_CLASS = Enum(
-    "TokenUser",
-    "TokenGroups",
-    "TokenPrivileges",
-    "TokenOwner",
-    "TokenPrimaryGroup",
-    "TokenDefaultDacl",
-    "TokenSource",
-    "TokenType",
-    "TokenImpersonationLevel",
-    "TokenStatistics",
-    "TokenRestrictedSids",
-    "TokenSessionId",
-    "TokenGroupsAndPrivileges",
-    "TokenSessionReference",
-    "TokenSandBoxInert",
-    "TokenAuditPolicy",
-    "TokenOrigin",
-    "TokenElevationType",
-    "TokenLinkedToken",
-    "TokenElevation",
-    "TokenHasRestrictions",
-    "TokenAccessInformation",
-    "TokenVirtualizationAllowed",
-    "TokenVirtualizationEnabled",
-    "TokenIntegrityLevel",
-    "TokenUIAccess",
-    "TokenMandatoryPolicy",
-    "TokenLogonSid",
-)
-
-TOKEN_TYPE = Enum("TokenPrimary", "TokenImpersonation")
-
-TOKEN_ELEVATION_TYPE = Enum(
-    "TokenElevationTypeDefault", "TokenElevationTypeFull", "TokenElevationTypeLimited"
-)
-
-POLICY_AUDIT_EVENT_TYPE = Enum(
-    "AuditCategorySystem",
-    "AuditCategoryLogon",
-    "AuditCategoryObjectAccess",
-    "AuditCategoryPrivilegeUse",
-    "AuditCategoryDetailedTracking",
-    "AuditCategoryPolicyChange",
-    "AuditCategoryAccountManagement",
-    "AuditCategoryDirectoryServiceAccess",
-    "AuditCategoryAccountLogon",
-)
-
-POLICY_INFORMATION_CLASS = Enum(
-    "PolicyAuditLogInformation",
-    "PolicyAuditEventsInformation",
-    "PolicyPrimaryDomainInformation",
-    "PolicyPdAccountInformation",
-    "PolicyAccountDomainInformation",
-    "PolicyLsaServerRoleInformation",
-    "PolicyReplicaSourceInformation",
-    "PolicyDefaultQuotaInformation",
-    "PolicyModificationInformation",
-    "PolicyAuditFullSetInformation",
-    "PolicyAuditFullQueryInformation",
-    "PolicyDnsDomainInformation",
-)
-
-POLICY_LSA_SERVER_ROLE = Enum("PolicyServerRoleBackup", "PolicyServerRolePrimary")
-
-## access modes for opening a policy handle - this is not a real enum
-POLICY_ACCESS_MODES = Enum(
-    "POLICY_VIEW_LOCAL_INFORMATION",
-    "POLICY_VIEW_AUDIT_INFORMATION",
-    "POLICY_GET_PRIVATE_INFORMATION",
-    "POLICY_TRUST_ADMIN",
-    "POLICY_CREATE_ACCOUNT",
-    "POLICY_CREATE_SECRET",
-    "POLICY_CREATE_PRIVILEGE",
-    "POLICY_SET_DEFAULT_QUOTA_LIMITS",
-    "POLICY_SET_AUDIT_REQUIREMENTS",
-    "POLICY_AUDIT_LOG_ADMIN",
-    "POLICY_SERVER_ADMIN",
-    "POLICY_LOOKUP_NAMES",
-    "POLICY_NOTIFICATION",
-    "POLICY_ALL_ACCESS",
-    "POLICY_READ",
-    "POLICY_WRITE",
-    "POLICY_EXECUTE",
-)
-
-## EventAuditingOptions flags - not a real enum
-POLICY_AUDIT_EVENT_OPTIONS_FLAGS = Enum(
-    "POLICY_AUDIT_EVENT_UNCHANGED",
-    "POLICY_AUDIT_EVENT_SUCCESS",
-    "POLICY_AUDIT_EVENT_FAILURE",
-    "POLICY_AUDIT_EVENT_NONE",
-)
-
-# AceType in ACE_HEADER - not a real enum
-ACE_TYPE = Enum(
-    "ACCESS_MIN_MS_ACE_TYPE",
-    "ACCESS_ALLOWED_ACE_TYPE",
-    "ACCESS_DENIED_ACE_TYPE",
-    "SYSTEM_AUDIT_ACE_TYPE",
-    "SYSTEM_ALARM_ACE_TYPE",
-    "ACCESS_MAX_MS_V2_ACE_TYPE",
-    "ACCESS_ALLOWED_COMPOUND_ACE_TYPE",
-    "ACCESS_MAX_MS_V3_ACE_TYPE",
-    "ACCESS_MIN_MS_OBJECT_ACE_TYPE",
-    "ACCESS_ALLOWED_OBJECT_ACE_TYPE",
-    "ACCESS_DENIED_OBJECT_ACE_TYPE",
-    "SYSTEM_AUDIT_OBJECT_ACE_TYPE",
-    "SYSTEM_ALARM_OBJECT_ACE_TYPE",
-    "ACCESS_MAX_MS_OBJECT_ACE_TYPE",
-    "ACCESS_MAX_MS_V4_ACE_TYPE",
-    "ACCESS_MAX_MS_ACE_TYPE",
-    "ACCESS_ALLOWED_CALLBACK_ACE_TYPE",
-    "ACCESS_DENIED_CALLBACK_ACE_TYPE",
-    "ACCESS_ALLOWED_CALLBACK_OBJECT_ACE_TYPE",
-    "ACCESS_DENIED_CALLBACK_OBJECT_ACE_TYPE",
-    "SYSTEM_AUDIT_CALLBACK_ACE_TYPE",
-    "SYSTEM_ALARM_CALLBACK_ACE_TYPE",
-    "SYSTEM_AUDIT_CALLBACK_OBJECT_ACE_TYPE",
-    "SYSTEM_ALARM_CALLBACK_OBJECT_ACE_TYPE",
-    "SYSTEM_MANDATORY_LABEL_ACE_TYPE",
-    "ACCESS_MAX_MS_V5_ACE_TYPE",
-)
-
-# bit flags for AceFlags - not a real enum
-ACE_FLAGS = Enum(
-    "CONTAINER_INHERIT_ACE",
-    "FAILED_ACCESS_ACE_FLAG",
-    "INHERIT_ONLY_ACE",
-    "INHERITED_ACE",
-    "NO_PROPAGATE_INHERIT_ACE",
-    "OBJECT_INHERIT_ACE",
-    "SUCCESSFUL_ACCESS_ACE_FLAG",
-    "NO_INHERITANCE",
-    "SUB_CONTAINERS_AND_OBJECTS_INHERIT",
-    "SUB_CONTAINERS_ONLY_INHERIT",
-    "SUB_OBJECTS_ONLY_INHERIT",
-)
-
-# used in SetEntriesInAcl - very similar to ACE_TYPE
-ACCESS_MODE = Enum(
-    "NOT_USED_ACCESS",
-    "GRANT_ACCESS",
-    "SET_ACCESS",
-    "DENY_ACCESS",
-    "REVOKE_ACCESS",
-    "SET_AUDIT_SUCCESS",
-    "SET_AUDIT_FAILURE",
-)
-
-# Bit flags in PSECURITY_DESCRIPTOR->Control - not a real enum
-SECURITY_DESCRIPTOR_CONTROL_FLAGS = Enum(
-    "SE_DACL_AUTO_INHERITED",  ## win2k and up
-    "SE_SACL_AUTO_INHERITED",  ## win2k and up
-    "SE_DACL_PROTECTED",  ## win2k and up
-    "SE_SACL_PROTECTED",  ## win2k and up
-    "SE_DACL_DEFAULTED",
-    "SE_DACL_PRESENT",
-    "SE_GROUP_DEFAULTED",
-    "SE_OWNER_DEFAULTED",
-    "SE_SACL_PRESENT",
-    "SE_SELF_RELATIVE",
-    "SE_SACL_DEFAULTED",
-)
-
-# types of SID
-SID_NAME_USE = Enum(
-    "SidTypeUser",
-    "SidTypeGroup",
-    "SidTypeDomain",
-    "SidTypeAlias",
-    "SidTypeWellKnownGroup",
-    "SidTypeDeletedAccount",
-    "SidTypeInvalid",
-    "SidTypeUnknown",
-    "SidTypeComputer",
-    "SidTypeLabel",
-)
-
-## bit flags, not a real enum
-TOKEN_ACCESS_PRIVILEGES = Enum(
-    "TOKEN_ADJUST_DEFAULT",
-    "TOKEN_ADJUST_GROUPS",
-    "TOKEN_ADJUST_PRIVILEGES",
-    "TOKEN_ALL_ACCESS",
-    "TOKEN_ASSIGN_PRIMARY",
-    "TOKEN_DUPLICATE",
-    "TOKEN_EXECUTE",
-    "TOKEN_IMPERSONATE",
-    "TOKEN_QUERY",
-    "TOKEN_QUERY_SOURCE",
-    "TOKEN_READ",
-    "TOKEN_WRITE",
-)
-
-SECURITY_IMPERSONATION_LEVEL = Enum(
-    "SecurityAnonymous",
-    "SecurityIdentification",
-    "SecurityImpersonation",
-    "SecurityDelegation",
-)
-
-POLICY_SERVER_ENABLE_STATE = Enum("PolicyServerEnabled", "PolicyServerDisabled")
-
-POLICY_NOTIFICATION_INFORMATION_CLASS = Enum(
-    "PolicyNotifyAuditEventsInformation",
-    "PolicyNotifyAccountDomainInformation",
-    "PolicyNotifyServerRoleInformation",
-    "PolicyNotifyDnsDomainInformation",
-    "PolicyNotifyDomainEfsInformation",
-    "PolicyNotifyDomainKerberosTicketInformation",
-    "PolicyNotifyMachineAccountPasswordInformation",
-)
-
-TRUSTED_INFORMATION_CLASS = Enum(
-    "TrustedDomainNameInformation",
-    "TrustedControllersInformation",
-    "TrustedPosixOffsetInformation",
-    "TrustedPasswordInformation",
-    "TrustedDomainInformationBasic",
-    "TrustedDomainInformationEx",
-    "TrustedDomainAuthInformation",
-    "TrustedDomainFullInformation",
-    "TrustedDomainAuthInformationInternal",
-    "TrustedDomainFullInformationInternal",
-    "TrustedDomainInformationEx2Internal",
-    "TrustedDomainFullInformation2Internal",
-)
-
-TRUSTEE_FORM = Enum(
-    "TRUSTEE_IS_SID",
-    "TRUSTEE_IS_NAME",
-    "TRUSTEE_BAD_FORM",
-    "TRUSTEE_IS_OBJECTS_AND_SID",
-    "TRUSTEE_IS_OBJECTS_AND_NAME",
-)
-
-TRUSTEE_TYPE = Enum(
-    "TRUSTEE_IS_UNKNOWN",
-    "TRUSTEE_IS_USER",
-    "TRUSTEE_IS_GROUP",
-    "TRUSTEE_IS_DOMAIN",
-    "TRUSTEE_IS_ALIAS",
-    "TRUSTEE_IS_WELL_KNOWN_GROUP",
-    "TRUSTEE_IS_DELETED",
-    "TRUSTEE_IS_INVALID",
-    "TRUSTEE_IS_COMPUTER",
-)
-
-## SE_OBJECT_TYPE - securable objects
-SE_OBJECT_TYPE = Enum(
-    "SE_UNKNOWN_OBJECT_TYPE",
-    "SE_FILE_OBJECT",
-    "SE_SERVICE",
-    "SE_PRINTER",
-    "SE_REGISTRY_KEY",
-    "SE_LMSHARE",
-    "SE_KERNEL_OBJECT",
-    "SE_WINDOW_OBJECT",
-    "SE_DS_OBJECT",
-    "SE_DS_OBJECT_ALL",
-    "SE_PROVIDER_DEFINED_OBJECT",
-    "SE_WMIGUID_OBJECT",
-    "SE_REGISTRY_WOW64_32KEY",
-)
-
-PRIVILEGE_FLAGS = Enum(
-    "SE_PRIVILEGE_ENABLED_BY_DEFAULT",
-    "SE_PRIVILEGE_ENABLED",
-    "SE_PRIVILEGE_USED_FOR_ACCESS",
-)
-
-# Group flags used with TokenGroups
-TOKEN_GROUP_ATTRIBUTES = Enum(
-    "SE_GROUP_MANDATORY",
-    "SE_GROUP_ENABLED_BY_DEFAULT",
-    "SE_GROUP_ENABLED",
-    "SE_GROUP_OWNER",
-    "SE_GROUP_USE_FOR_DENY_ONLY",
-    "SE_GROUP_INTEGRITY",
-    "SE_GROUP_INTEGRITY_ENABLED",
-    "SE_GROUP_LOGON_ID",
-    "SE_GROUP_RESOURCE",
-)
-
-# Privilege flags returned by TokenPrivileges
-TOKEN_PRIVILEGE_ATTRIBUTES = Enum(
-    "SE_PRIVILEGE_ENABLED_BY_DEFAULT",
-    "SE_PRIVILEGE_ENABLED",
-    "SE_PRIVILEGE_REMOVED",
-    "SE_PRIVILEGE_USED_FOR_ACCESS",
-)

py2docfx/venv/venv1/Lib/site-packages/win32/Demos/security/set_file_audit.py

@@ -1,106 +0,0 @@
-import os
-
-import ntsecuritycon
-import win32api
-import win32con
-import win32security
-from win32security import (
-    ACL_REVISION_DS,
-    CONTAINER_INHERIT_ACE,
-    DACL_SECURITY_INFORMATION,
-    GROUP_SECURITY_INFORMATION,
-    OBJECT_INHERIT_ACE,
-    OWNER_SECURITY_INFORMATION,
-    PROTECTED_DACL_SECURITY_INFORMATION,
-    SACL_SECURITY_INFORMATION,
-    SE_FILE_OBJECT,
-)
-
-## SE_SECURITY_NAME needed to access SACL, SE_RESTORE_NAME needed to change owner to someone other than yourself
-new_privs = (
-    (
-        win32security.LookupPrivilegeValue("", ntsecuritycon.SE_SECURITY_NAME),
-        win32con.SE_PRIVILEGE_ENABLED,
-    ),
-    (
-        win32security.LookupPrivilegeValue("", ntsecuritycon.SE_RESTORE_NAME),
-        win32con.SE_PRIVILEGE_ENABLED,
-    ),
-)
-ph = win32api.GetCurrentProcess()
-th = win32security.OpenProcessToken(
-    ph, win32security.TOKEN_ALL_ACCESS | win32con.TOKEN_ADJUST_PRIVILEGES
-)
-modified_privs = win32security.AdjustTokenPrivileges(th, 0, new_privs)
-
-## look up a few sids that should be available on most systems
-my_sid = win32security.GetTokenInformation(th, ntsecuritycon.TokenUser)[0]
-pwr_sid = win32security.LookupAccountName("", "Power Users")[0]
-admin_sid = win32security.LookupAccountName("", "Administrators")[0]
-everyone_sid = win32security.LookupAccountName("", "EveryOne")[0]
-
-## create a dir and set security so Everyone has read permissions, and all files and subdirs inherit its ACLs
-temp_dir = win32api.GetTempPath()
-dir_name = win32api.GetTempFileName(temp_dir, "sfa")[0]
-os.remove(dir_name)
-os.mkdir(dir_name)
-dir_dacl = win32security.ACL()
-dir_dacl.AddAccessAllowedAceEx(
-    ACL_REVISION_DS,
-    CONTAINER_INHERIT_ACE | OBJECT_INHERIT_ACE,
-    win32con.GENERIC_READ,
-    everyone_sid,
-)
-## make sure current user has permissions on dir
-dir_dacl.AddAccessAllowedAceEx(
-    ACL_REVISION_DS,
-    CONTAINER_INHERIT_ACE | OBJECT_INHERIT_ACE,
-    win32con.GENERIC_ALL,
-    my_sid,
-)
-## keep dir from inheriting any permissions so it only has ACEs explicitly set here
-win32security.SetNamedSecurityInfo(
-    dir_name,
-    SE_FILE_OBJECT,
-    OWNER_SECURITY_INFORMATION
-    | GROUP_SECURITY_INFORMATION
-    | DACL_SECURITY_INFORMATION
-    | PROTECTED_DACL_SECURITY_INFORMATION,
-    pwr_sid,
-    pwr_sid,
-    dir_dacl,
-    None,
-)
-
-## Create a file in the dir and add some specific permissions to it
-fname = win32api.GetTempFileName(dir_name, "sfa")[0]
-print(fname)
-file_sd = win32security.GetNamedSecurityInfo(
-    fname, SE_FILE_OBJECT, DACL_SECURITY_INFORMATION | SACL_SECURITY_INFORMATION
-)
-file_dacl = file_sd.GetSecurityDescriptorDacl()
-file_sacl = file_sd.GetSecurityDescriptorSacl()
-
-if file_dacl is None:
-    file_dacl = win32security.ACL()
-if file_sacl is None:
-    file_sacl = win32security.ACL()
-
-file_dacl.AddAccessDeniedAce(file_dacl.GetAclRevision(), win32con.DELETE, admin_sid)
-file_dacl.AddAccessDeniedAce(file_dacl.GetAclRevision(), win32con.DELETE, my_sid)
-file_dacl.AddAccessAllowedAce(file_dacl.GetAclRevision(), win32con.GENERIC_ALL, pwr_sid)
-file_sacl.AddAuditAccessAce(
-    file_dacl.GetAclRevision(), win32con.GENERIC_ALL, my_sid, True, True
-)
-
-win32security.SetNamedSecurityInfo(
-    fname,
-    SE_FILE_OBJECT,
-    DACL_SECURITY_INFORMATION | SACL_SECURITY_INFORMATION,
-    None,
-    None,
-    file_dacl,
-    file_sacl,
-)
-
-win32security.AdjustTokenPrivileges(th, 0, modified_privs)