[issue21030] pip usable only by administrators on Windows

[Christian Ullrich]

Christian Ullrich added the comment:

According to procmon, ensurepip first installs the bundled packages in $TEMP, then moves the resulting files to the Python installation directory. According to http://support.microsoft.com/kb/310316, a file that is moved within the same volume keeps its original ACL and does not inherit permissions from its new parent directory.

I can think of two ways to fix this:

1. Instead of moving the files, copy them (and delete the originals)
2. Reset the ACLs after the move. The icacls commands I posted earlier
   will work, but icacls may not be available with the same option set
   on all supported Windows versions.

Of the two, #1 is probably more reliable.

----------

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue21030>
_______________________________________