SNOW-1460707: Fix permission error when there is no permission on the parent directory of config file path (#1965)

Author: sfc-gh-jdu

DESCRIPTION.md

@@ -15,6 +15,7 @@ Source code is also available at: https://github.com/snowflakedb/snowflake-conne
   - Added support for `disable_saml_url_check` connection parameter to disable SAML URL check in OKTA authentication.
   - Fixed a bug that OCSP certificate signed using SHA384 algorithm cannot be verified.
   - Fixed a bug that status code shown as uploaded when PUT command failed with 400 error.
+  - Fixed a bug that a PermissionError was raised when the current user does not have the right permission on parent directory of config file path.
 
 - v3.10.1(May 21, 2024)
 

src/snowflake/connector/config_manager.py

@@ -320,8 +320,15 @@ def read_config(
         ):
             if sliceoptions.only_in_slice:
                 del read_config_file[section]
-            if not filep.exists():
+            try:
+                if not filep.exists():
+                    continue
+            except PermissionError:
+                LOGGER.debug(
+                    f"Fail to read configuration file from {str(filep)} due to no permission on its parent directory"
+                )
                 continue
+
             if (
                 sliceoptions.check_permissions  # Skip checking if this file couldn't hold sensitive information
                 # Same check as openssh does for permissions

test/unit/test_configmanager.py

@@ -4,6 +4,7 @@
 
 from __future__ import annotations
 
+import logging
 import os.path
 import re
 import shutil
@@ -598,6 +599,34 @@ def test_warn_config_file_permissions(tmp_path):
     )
 
 
+@pytest.mark.skipif(IS_WINDOWS, reason="chmod doesn't work on Windows")
+def test_log_debug_config_file_parent_dir_permissions(tmp_path, caplog):
+    tmp_dir = tmp_path / "tmp_dir"
+    tmp_dir.mkdir()
+    c_file = tmp_dir / "config.toml"
+    c1 = ConfigManager(file_path=c_file, name="root_parser")
+    c1.add_option(name="b", parse_str=lambda e: e.lower() == "true")
+    c_file.write_text(
+        dedent(
+            """\
+            b = true
+            """
+        )
+    )
+    mod = tmp_dir.stat()
+    tmp_dir.chmod(0)
+
+    caplog.clear()
+
+    with caplog.at_level(logging.DEBUG):
+        c1.read_config()
+    assert not c1.conf_file_cache
+    assert "due to no permission on its parent directory" in caplog.text
+
+    tmp_dir.chmod(stat.S_IMODE(mod.st_mode))
+    shutil.rmtree(tmp_dir)
+
+
 def test_configoption_missing_root_manager():
     with pytest.raises(
         TypeError,