Python - checking if a user has administrator privileges

问题

I'm writing a little program as a self-learning project in Python 3.x. My idea is for the program to allow two fields of text entry to the user, and then plug the user's input into the value of two specific registry keys.

Is there a simple way to make it check if the current user can access the registry? I'd rather it cleanly tell the user that he/she needs administrator privileges than for the program to go nuts and crash because it's trying to access a restricted area.

I'd like it to make this check as soon as the program launches, before the user is given any input options. What code is needed for this?

Edit: in case it isn't obvious, this is for the Windows platforms.

回答1:

I needed a simple, Windows/Posix solution to test if a user has root/admin privileges to the file system without installing an 3rd party solution. I understand there are vulnerabilities when relying on environment variables, but they suited my purpose. It might be possible to extend this approach to read/write the registry.

I tested this with Python 2.6/2.7 on WinXP, WinVista and Wine. If anyone knows this will not work on Pyton 3.x and/or Win7, please advise. Thanks.

def has_admin():
    import os
    if os.name == 'nt':
        try:
            # only windows users with admin privileges can read the C:\windows\temp
            temp = os.listdir(os.sep.join([os.environ.get('SystemRoot','C:\\windows'),'temp']))
        except:
            return (os.environ['USERNAME'],False)
        else:
            return (os.environ['USERNAME'],True)
    else:
        if 'SUDO_USER' in os.environ and os.geteuid() == 0:
            return (os.environ['SUDO_USER'],True)
        else:
            return (os.environ['USERNAME'],False)

回答2:

With pywin32, something like the following should work...:

import pythoncom
import pywintypes
import win32api
from win32com.shell import shell

if shell.IsUserAnAdmin():
   ...

And yes, it seems pywin32 does support Python 3.

回答3:

Here's a short article on how to determine if an application requires elevated privileges.

You can use pywin32 or ctypes to do the CreateProcess() call.

I suggest ctypes since it comes standard in python now, and there is a good example of using CreateProcess with ctypes here.

回答4:

Most straightforward way is try to change the key at the beginning, maybe to a stub value - if that fails, catch the error and tell the user.

来源：https://stackoverflow.com/questions/2946746/python-checking-if-a-user-has-administrator-privileges

标签

python

windows

registry

privileges