What is the bug or the crash?
- Running on Windows 11 Pro 25H2 (26200.8655) with all current updates.
- Installed QGIS 4.0.3 using OSGeo4W installer
- QT 6.11.1
- Python 3.12.13
The folders and files for plugins installed using QGIS plugin manager have access control lists (ACL) that do not include NT AUTHORITY\SYSTEM or BUILTIN\Administrators. This appears to generate access errors with system back up and then the backup retention policy does not run.
Work-around was to create an exception rule for the plugins folder and add another task to list that needs to be done in case of a system restore.
Expected behaviour is to allow access to SYSTEM and Administrators in ACL for plugin folders and files.
Note: I do not know much about the Windows ACL. I ran:
icacls .\plugins\ from ...\AppData\Roaming\QGIS\QGIS4\profiles\default\python\
Output:
.\plugins\ NT AUTHORITY\SYSTEM:(I)(OI)(CI)(F)
BUILTIN\Administrators:(I)(OI)(CI)(F)
THIS_COMPUTER\my_user:(I)(OI)(CI)(F)
I understand this to mean children of .\plugins\ will have full permissions inherited for SYSTEM and Administrators by default.
The output of icacls .\plugins\qtiles\ is:
.\plugins\qtiles THIS_COMPUTER\my_user:(OI)(CI)(F)
THIS_COMPUTER\None:(OI)(CI)(Rc,S,RA)
Everyone:(OI)(CI)(Rc,S,RA)
Here I do not see an entry for SYSTEM and Administrators. I do not know what the None entry applies to.
At first glance I thought Everyone should be able to read but further seems to indicate the Rc = read control does not allow access to read the contents of the folder. Further, I believe the SYSTEM and Administrators entries are needed or even a backup process with elevated privileges cannot access the folder.
Summary, I think there is a bug in the way QGIS is overriding the inherited permissions.
Steps to reproduce the issue
- Start QGIS 4.0.3
- Open plugin manager
- Install a plugin from standard repository list.
- Execute a system process the is not running as the user that installed the plugin, i.e. system backup.
- Review for the process having access denied for the plugin folder.
Versions
| QGIS version | 4.0.3-Norrköping |
| QGIS code revision | 70e40ae6 |
| |
| Libraries |
| Qt version | 6.11.1 |
| Python version | 3.12.13 |
| GDAL version | 3.13.0 (Compiled)
3.13.1 (Running) — Iowa City |
| PROJ version | 9.8.1 |
| EPSG Registry database version | v12.029 (2025-10-02) |
| GEOS version | 3.14.1-CAPI-1.20.5 |
| SFCGAL version | 2.2.0 |
| GeographicLib version | 2.7.0 |
| SQLite version | 3.53.0 (Compiled)
3.53.2 (Running) |
| PDAL version | 2.10.0 |
| PostgreSQL client version | 17.3 |
| SpatiaLite version | 5.1.0 |
| QWT version | 6.3.0 |
| QScintilla2 version | 2.14.1 |
| OS version | Windows 11 Version 25H2 |
| |
| Active Python plugins |
| db_manager | 0.1.20 |
| grassprovider | 2.12.99 |
| processing | 2.12.99 |
| quick-geojson | 1.1 |
| slyr_community | 7.0.0 |
| whitebox_workflows_for_qgis | 2.1.3 |
Supported QGIS version
New profile
No Duplicate of the Issue
Additional context
i have tried on different computers with same result.
What is the bug or the crash?
The folders and files for plugins installed using QGIS plugin manager have access control lists (ACL) that do not include NT AUTHORITY\SYSTEM or BUILTIN\Administrators. This appears to generate access errors with system back up and then the backup retention policy does not run.
Work-around was to create an exception rule for the plugins folder and add another task to list that needs to be done in case of a system restore.
Expected behaviour is to allow access to SYSTEM and Administrators in ACL for plugin folders and files.
Note: I do not know much about the Windows ACL. I ran:
icacls .\plugins\from...\AppData\Roaming\QGIS\QGIS4\profiles\default\python\Output:
I understand this to mean children of
.\plugins\will have full permissions inherited for SYSTEM and Administrators by default.The output of
icacls .\plugins\qtiles\is:Here I do not see an entry for SYSTEM and Administrators. I do not know what the None entry applies to.
At first glance I thought Everyone should be able to read but further seems to indicate the Rc = read control does not allow access to read the contents of the folder. Further, I believe the SYSTEM and Administrators entries are needed or even a backup process with elevated privileges cannot access the folder.
Summary, I think there is a bug in the way QGIS is overriding the inherited permissions.
Steps to reproduce the issue
Versions
3.13.1 (Running) — Iowa City
3.53.2 (Running)
Supported QGIS version
New profile
No Duplicate of the Issue
Additional context
i have tried on different computers with same result.