Validate permissions on the session directory itself, not it's parent, per Felix Pusch. Fixes #4276

web/pgadmin/setup/data_directory.py

@@ -39,7 +39,7 @@ def create_app_data_directory(config):
     # Create the session directory (if not present).
     _create_directory_if_not_exists(config.SESSION_DB_PATH)
     if os.name != 'nt':
-        os.chmod(os.path.dirname(config.SESSION_DB_PATH), 0o700)
+        os.chmod(config.SESSION_DB_PATH, 0o700)
 
     # Create the storage directory (if not present).
     _create_directory_if_not_exists(config.STORAGE_DIR)

web/pgadmin/setup/tests/test_permissions.py

@@ -25,7 +25,7 @@ class PermissionsTestCase(BaseTestGenerator):
             path=os.path.dirname(config.TEST_SQLITE_PATH),
             permissions='700')),
         ('Check session directory', dict(
-            path=os.path.dirname(config.SESSION_DB_PATH),
+            path=config.SESSION_DB_PATH,
             permissions='700'))
     ]