port_fix_util_users_chugin_and_umask

salt/utils/user.py

@@ -254,18 +254,24 @@ def chugid_and_umask(runas, umask, group=None):
     set_grp = False
 
     current_user = getpass.getuser()
+    current_grp = grp.getgrgid(pwd.getpwnam(getpass.getuser()).pw_gid).gr_name
+
     if runas and runas != current_user:
         set_runas = True
         runas_user = runas
     else:
         runas_user = current_user
 
-    current_grp = grp.getgrgid(pwd.getpwnam(getpass.getuser()).pw_gid).gr_name
-    if group and group != current_grp:
-        set_grp = True
+    if group:
         runas_grp = group
+        if group != current_grp:
+            set_grp = True
     else:
-        runas_grp = current_grp
+        if runas and runas != current_user:
+            runas_grp = grp.getgrgid(pwd.getpwnam(runas_user).pw_gid).gr_name
+            set_grp = True
+        else:
+            runas_grp = current_grp
 
     if set_runas or set_grp:
         chugid(runas_user, runas_grp)

tests/support/helpers.py

@@ -47,6 +47,11 @@
 from tests.support.sminion import create_sminion
 from tests.support.unit import SkipTest, _id, skip
 
+if salt.utils.platform.is_windows():
+    import salt.utils.win_functions
+else:
+    import pwd
+
 log = logging.getLogger(__name__)
 
 HAS_SYMLINKS = None
@@ -1742,3 +1747,12 @@ def _create_virtualenv(self):
         sminion.functions.virtualenv.create(
             self.venv_dir, python=self._get_real_python()
         )
+
+
+def this_user():
+    """
+    Get the user associated with the current process.
+    """
+    if salt.utils.platform.is_windows():
+        return salt.utils.win_functions.get_current_user(with_domain=False)
+    return pwd.getpwuid(os.getuid())[0]

tests/unit/utils/test_user.py

@@ -0,0 +1,61 @@
+# -*- coding: utf-8 -*-
+
+# Import python libs
+from __future__ import absolute_import, print_function, unicode_literals
+
+import grp
+import os
+import pwd
+
+# Import salt libs
+import salt.utils.platform
+import salt.utils.user
+from tests.support.helpers import this_user
+from tests.support.mock import patch
+
+# Import Salt Testing libs
+from tests.support.unit import TestCase, skipIf
+
+
+class TestUser(TestCase):
+    @skipIf(salt.utils.platform.is_windows(), "Module not available on Windows")
+    def test_chugid_and_umask(self):
+
+        running_user = this_user()
+        running_group = grp.getgrgid(os.getgid()).gr_name
+
+        gids = {30: "expectedgroup", 20: running_group}
+        getgrnams = {
+            "expectedgroup": grp.struct_group(
+                ("expectedgroup", "*", 30, ["expecteduser"])
+            ),
+            running_group: grp.struct_group((running_group, "*", 20, [running_user])),
+        }
+        getpwnams = {
+            "expecteduser": pwd.struct_passwd(
+                ("expecteduser", "x", 30, 30, "-", "-", "-")
+            ),
+            running_user: pwd.struct_passwd((running_user, "x", 20, 20, "-", "-", "-")),
+        }
+
+        def getgrnam(group):
+            return getgrnams[group]
+
+        def getpwnam(user):
+            return getpwnams[user]
+
+        def getgrgid(gid):
+            return getgrnams[gids[gid]]
+
+        with patch("grp.getgrgid", getgrgid):
+            with patch("grp.getgrnam", getgrnam):
+                with patch("pwd.getpwnam", getpwnam):
+                    with patch("salt.utils.user.chugid") as chugid_mock:
+                        salt.utils.user.chugid_and_umask(
+                            "expecteduser", umask=None, group=running_group
+                        )
+                        chugid_mock.assert_called_with("expecteduser", running_group)
+                        salt.utils.user.chugid_and_umask(
+                            "expecteduser", umask=None, group=None
+                        )
+                        chugid_mock.assert_called_with("expecteduser", "expectedgroup")