code: def check_permissions(self, filename):
          '''
          Check if the specified filename has correct permissions
          '''
          if salt.utils.platform.is_windows():
              return True
  
          # After we've ascertained we're not on windows
          groups = salt.utils.user.get_gid_list(self.opts['user'], include_default=False)
          fmode = os.stat(filename)
  
          if stat.S_IWOTH & fmode.st_mode:
              # don't allow others to write to the file
              return False
  
          if stat.S_IWGRP & fmode.st_mode:
              # if the group has write access only allow with permissive_pki_access
              if not self.opts.get('permissive_pki_access', False):
                  return False
              elif os.getuid() == 0 and fmode.st_gid not in groups:
                  # if salt is root it has to be in the group that has write access
                  # this gives the group 'permission' to have write access
                  return False
  
          return Truf check_permissions(self, filename):
          '''
          Check if the specified filename has correct permissions
          '''
          if salt.utils.platform.is_windows():
              return True
  
          # After we've ascertained we're not on windows
          groups = salt.utils.user.get_gid_list(self.opts['user'], include_default=False)
          fmode = os.stat(filename)
  
          if stat.S_IWOTH & fmode.st_mode:
              # don't allow others to write to the file
              return False
  
          if stat.S_IWGRP & fmode.st_mode:
              # if the group has write access only allow with permissive_pki_access
              if not self.opts.get('permissive_pki_access', False):
                  return False
              elif os.getuid() == 0 and fmode.st_gid not in groups:
                  # if salt is root it has to be in the group that has write access
                  # this gives the group 'permission' to have write access
                  return False
  
          return True
docs: Check if the specified filename has correct permissions