Jira (PUP-4684) windows file resource doesn't grant group full permissions

[Josh Cooper (JIRA)]

Title: Message Title

Josh Cooper created an issue   Puppet / PUP-4684 windows file resource doesn't grant group full permissions Issue Type: Bug Assignee: Unassigned Created: 2015/06/02 5:00 PM Labels: windows Priority: Normal Reporter: Josh Cooper If you grant rwx permission to a file's group: file { 'C:\foo': ensure => directory, owner => 'foo', group => 'Administrators', mode => '0770', } file { 'C:\foo\foo.bat': ensure => file, content => 'echo "hello"' } The windows provider does not map that to full control. Instead the group receives a subset of permissions. More specifically, any file contained in the directory being managed is not executable: C:\> puppet apply foo.pp Notice: Compiled catalog for win-qp47voha2p4.solar.lan in environment production in 0.50 seconds Notice: /Stage[main]/Main/File[C:\foo]/ensure: created Notice: /Stage[main]/Main/File[C:\foo\foo.bat]/ensure: defined content as '{md5}84b8f5c3577073eac07c9e9915e5b8c9' Notice: Applied catalog in 0.06 seconds C:\> icacls c:\foo c:\foo WIN-QP47VOHA2P4\albert:(F) BUILTIN\Administrators:(RX,W,DC) Everyone:(Rc,S,RA) NT AUTHORITY\SYSTEM:(F) CREATOR OWNER:(CI)(IO)(F) CREATOR GROUP:(CI)(IO)(RX,W,DC) CREATOR OWNER:(OI)(IO)(R,W,D,WDAC,WO,DC) CREATOR GROUP:(OI)(IO)(R,W,DC)   Successfully processed 1 files; Failed processing 0 files C:\> icacls C:\foo\foo.bat C:\foo\foo.bat BUILTIN\Administrators:(I)(R,W,D,WDAC,WO,DC) WIN-QP47VOHA2P4\None:(I)(R,W,DC) Add Comment   This message was sent by Atlassian JIRA (v6.3.15#6346-sha1:dbc023d) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.