Hello,

I'm running python 3.5.1 under windows and I've noticed glob.glob is returning incorrect results when I'm using full path name to directory to which I don't have access permissions.

Please consider this:

    >> glob.glob('c:\\PerfLog*')
    ['c:\\PerfLogs']
    >> glob.glob('c:\\PerfLogs')
    []
    >> glob.glob('c:\\PerfLogs*')
    ['c:\\PerfLogs']

I tried to replicate this under Linux with "chmod 000", but so far I'm unable to. One more example from Windows: "c:\\System Volume Information". This is also the case for user-created directories where python interpreter does not have access rights to directory - I have one like that on my client's machine.

What returns os.lstat('c:\\PerfLogs')?

>>> os.lstat('c:\\PerfLogs')
    Traceback (most recent call last):
      File "<stdin>", line 1, in <module>
    PermissionError: [WinError 5] Odmowa dostępu: 'c:\\PerfLogs'

(thats "Permission denied")

The access control list of a file may not grant or may deny the current user the right to read file attributes (i.e. lstat). Generally you don't have to worry about granted access to parent directories when attempting to stat the file or directory, since even standard users have SeChangeNotifyPrivilege to bypass path traversal access checks. In this case, ISTM that we at least know the file exists if lstat raises PermissionError instead of FileNotFoundError. Currently os.path.lexists returns False for any OSError, without distinguishing between these two cases.

You may also come across a similar issue when a file's delete disposition is set, since Windows doesn't allow opening a deleted file, even to read its attributes, and it doesn't actually unlink the file or directory until all references are closed. 

For example, create a directory, opened with delete sharing:

    >>> h = _winapi.CreateFile('testglob', 0x40000000, 7, 0, 1,
    ...                        0x2000000|0x1000000|0x80|0x10, 0)
    >>> os.path.isdir('testglob')
    True

Before removing the directory, it can be globbed directly:

    >>> glob.glob('testglob')
    ['testglob']

After removing the directory, it can only be globbed indirectly by listing its parent directory:

    >>> os.rmdir('testglob')
    >>> os.lstat('testglob')
    Traceback (most recent call last):
      File "<stdin>", line 1, in <module>
    PermissionError: [WinError 5] Access is denied: 'testglob'

    >>> glob.glob('testglob')
    []
    >>> glob.glob('testglob*')
    ['testglob']

Once the handle is closed, the directory is unlinked:

    >>> _winapi.CloseHandle(h)
    >>> os.lstat('testglob')
    Traceback (most recent call last):
      File "<stdin>", line 1, in <module>
    FileNotFoundError: [WinError 2] The system cannot find the file specified: 'testglob'
    >>> glob.glob('testglob*')
    []

Issue 28075 extended the os.stat() and os.lstat() implementation to query basic stat informatiom from the parent directory if opening the file fails with ERROR_ACCESS_DENIED. This change first became available in Python 3.5.3. 

Previously it was only querying the parent directory for the case of ERROR_SHARING_VIOLATION, which is unlikely since the open doesn't request and data access that requires sharing. It does handle one case that I know of. NTFS refuses to share even metadata access for a system paging file such as "C:\pagefile.sys".