Merge 5afa213 into b817b03

LeonarddeR · web-flow · commit 258c421f9fb6 · 2022-06-22T03:14:51.000+10:00
diff --git a/source/UIAHandler/__init__.py b/source/UIAHandler/__init__.py
@@ -814,21 +814,23 @@ def _isUIAWindowHelper(self,hwnd):
 				and not config.conf['UIA']['useInMSExcelWhenAvailable']
 			):
 				return False
-			# Unless explicitly allowed, all Chromium implementations (including Edge) should not be UIA,
-			# As their IA2 implementation is still better at the moment.
-			elif (
-				windowClass == "Chrome_RenderWidgetHostHWND"
-				and (
+			elif windowClass == "Chrome_RenderWidgetHostHWND":
+				# Unless explicitly allowed, all Chromium implementations (including Edge) should not be UIA,
+				# As their IA2 implementation is still better at the moment.
+				# However, in cases where Chromium is running under another logon session,
+				# the IAccessible2 implementation is unavailable.
+				hasAccessToIA2 = not appModule.isRunningUnderDifferentLogonSession
+				if (
 					AllowUiaInChromium.getConfig() == AllowUiaInChromium.NO
 					# Disabling is only useful if we can inject in-process (and use our older code)
 					or (
 						canUseOlderInProcessApproach
+						and hasAccessToIA2
 						and AllowUiaInChromium.getConfig() != AllowUiaInChromium.YES  # Users can prefer to use UIA
 					)
-				)
-			):
-				return False
-			if windowClass == "ConsoleWindowClass":
+				):
+					return False
+			elif windowClass == "ConsoleWindowClass":
 				return utils._shouldUseUIAConsole(hwnd)
 		return bool(res)
 
diff --git a/source/appModuleHandler.py b/source/appModuleHandler.py
@@ -44,6 +44,7 @@
 import extensionPoints
 from fileUtils import getFileVersionInfo
 import globalVars
+from systemUtils import getProcessTokenOrigin
 
 
 _KNOWN_IMPORTERS_T = Union[importlib.machinery.FileFinder, zipimport.zipimporter]
@@ -666,6 +667,21 @@ def _get_isWindowsStoreApp(self):
 		self.isWindowsStoreApp = False
 		return self.isWindowsStoreApp
 
+	def _get_isRunningUnderDifferentLogonSession(self) -> bool:
+		"""Returns whether the application for this appModule was started under a different logon session.
+		This applies to applications started with the Windows runas command
+		or when choosing "run as a different user" from an application's (shortcut) context menu.
+		"""
+		try:
+			self.isRunningUnderDifferentLogonSession = (
+				globalVars.appLogonSessionID != 0
+				and globalVars.appLogonSessionID != getProcessTokenOrigin(self.processHandle)
+			)
+		except WindowsError:
+			log.error(f"Couldn't get logon session ID for {self}", exc_info=True)
+			self.isRunningUnderDifferentLogonSession = False
+		return self.isRunningUnderDifferentLogonSession
+
 	def _get_appArchitecture(self):
 		"""Returns the target architecture for the specified app.
 		This is useful for detecting X86/X64 apps running on ARM64 releases of Windows 10.
diff --git a/source/globalVars.py b/source/globalVars.py
@@ -70,6 +70,10 @@ class DefaultAppArgs(argparse.Namespace):
 """The process ID of NVDA itself.
 """
 
+appLogonSessionID: int = 0
+"""The logon session ID under which NVDA was started.
+"""
+
 _allowDeprecatedAPI: bool = True
 """
 Used for marking code as deprecated.
diff --git a/source/nvda.pyw b/source/nvda.pyw
@@ -77,6 +77,15 @@ import logHandler
 from logHandler import log
 import winUser
 import winKernel
+# Avoid a E402 'module level import not at top of file' warning,
+# because monkeypatches need to be applied first first
+from systemUtils import getProcessTokenOrigin  # noqa: E402
+
+try:
+	globalVars.appLogonSessionID = getProcessTokenOrigin(winKernel.GetCurrentProcess())
+except WindowsError:
+	log.error("Couldn't get NVDAProcessLogonSessionID", exc_info=True)
+
 
 # Find out if NVDA is running as a Windows Store application
 bufLen=ctypes.c_int()
diff --git a/source/systemUtils.py b/source/systemUtils.py
@@ -63,6 +63,36 @@ def hasUiAccess():
 		ctypes.windll.kernel32.CloseHandle(token)
 
 
+TokenOrigin = 17
+
+
+class TOKEN_ORIGIN(ctypes.Structure):
+	_fields_ = [("OriginatingLogonSession", ctypes.c_ulonglong)]
+
+
+def getProcessTokenOrigin(processHandle):
+	token = ctypes.wintypes.HANDLE()
+	if not ctypes.windll.advapi32.OpenProcessToken(
+		processHandle,
+		winKernel.MAXIMUM_ALLOWED,
+		ctypes.byref(token)
+	):
+		raise ctypes.WinError()
+	try:
+		val = TOKEN_ORIGIN()
+		if not ctypes.windll.advapi32.GetTokenInformation(
+			token,
+			TokenOrigin,
+			ctypes.byref(val),
+			ctypes.sizeof(val),
+			ctypes.byref(ctypes.wintypes.DWORD())
+		):
+			raise ctypes.WinError()
+		return val.OriginatingLogonSession
+	finally:
+		ctypes.windll.kernel32.CloseHandle(token)
+
+
 def execElevated(path, params=None, wait=False, handleAlreadyElevated=False):
 	import subprocess
 	if params is not None:
