other_access

other_access is more flexible implementation of os.access().

While os.access() checks access for current user only, other_access / oaccess can check access for other users/groups. In other words, other_access will return same result, no matter which user runs it (Supposing current user can os.stat() that file).

For example, root user can use other_access.oaccess(path, os.R_OK, 'www-data') to ensure files are readable by www-data user.

Limitation

other_access does not supports filesystem ACL.

Install

pip3 install other-access

Usage

other_access(path, mode, uid, gids=None) - main function. similar to os.access(), but checks for other user (uid) and list of groups (gids). User and group id's are integer (not names).

oaccess(path, mode, user, groups) - wrapper for other_access which takes names for user/groups, converts it to numerical uid/gids and calls other_access(). If groups is None, oaccess will use all groups for this user. (specify only main group or empty list to override this)

Examples

Lets use /etc/shadow for example:

-rw-r----- 1 root shadow 1841 Jun  2 04:07 /etc/shadow

import os
from other_access import oaccess

# user root can read and write
assert oaccess('/etc/shadow', os.R_OK | os.W_OK, 'root') == True

# group shadow can read
assert oaccess('/etc/shadow', os.R_OK, 'nobody', ['shadow']) == True

# Other can check existence of file, but cannot read
assert oaccess('/etc/shadow', os.F_OK, 'nobody') == True
assert oaccess('/etc/shadow', os.R_OK, 'nobody') == False