Re: [PATCH] wbemprox: Return WBEM_E_ACCESS_DENIED from IEnumWbemClassObject::Next() if the object is empty.

[Dmitry Timoshkov]

Dmitry Timoshkov  wrote:
> > > Could you suggest a place in Wine where a permission check could be added?
> >
> > It's not clear to me if this is a general WMI thing or if it depends on the
> > object being queried.
>
> I'll copy WMI tests from dlls/wbemprox/tests to the MSI custom action tests
> to get a picture how it works under Windows.

I've ported dlls/wbemprox/query.c to run from the MSI custom action,
added strict checks for ::Next() return values everywhere, and while
some of the queries fail ::Next() never returns WBEM_E_ACCESS_DENIED.
It turned out that commenting out CoSetProxyBlanket() made the ::Next()
calls for empty objects always return WBEM_E_ACCESS_DENIED instead of
WBEM_S_FALSE/WBEM_S_TIMEDOUT. It's not obvious to me where the proposed
access check should be added. Hans, do the test results add any clue to you?