Added a test for duplicating a security token with incorrect permissions

1 files changed, 8 insertions, 0 deletions

diff --git a/spec/functional/win32/security_spec.rb b/spec/functional/win32/security_spec.rb
index 7ad6756a20..8c3db8e2d2 100644
--- a/spec/functional/win32/security_spec.rb
+++ b/spec/functional/win32/security_spec.rb
@@ -48,5 +48,13 @@ describe 'Chef::Win32::Security', :windows_only do
         expect{ token.duplicate_token(:SecurityImpersonation) }.not_to raise_error
       end
     end
+
+    context 'with read only rights' do
+      let(:token_rights) { Chef::ReservedNames::Win32::Security::TOKEN_READ }
+
+      it 'raises an exception when trying to duplicate' do
+        expect{ token.duplicate_token(:SecurityImpersonation) }.to raise_error(Chef::Exceptions::Win32APIError)
+      end
+    end
   end
 end