Elevated privileges problem

Actually, the SPContext.Current property is probably returning the original context of the web request. Try changing your code to this and see if you get any different results:

Hi there,

I'm truly new to privilages problem (almost same problem as yours, i guess).

Our sharepoint is using SSL, in App Pool>Identity we have hardcoded the username and password for authentication, instead of using "Network Services" as Identity.

I had below sample codes, (I use VS Extension for WSS to write and upload to server):

namespace User_Name

[Guid("d172ae1f-12f2-4706-ba17-b35e2663e9c8")]

public class User_Name : System.Web.UI.WebControls.WebParts.WebPart

public User_Name()

protected Label lblError;

protected Button btnSave;

protected TextBox txtWrite;

........

........... here are all the process ....................

});

}

I'm trying to slot in below codes here and there, but don't know how to do it properly ...(or maybe still need more lines in between):

SPSecurity.RunWithElevatedPrivileges(delegate()

Attempted to perform an unauthorized operation

Can I code it using hardcoded username and password (the one for App Pool). I guess the system needs this authorization programatically. If yes, how should i go about doing it

Can those codes on top be used for this purpose..

Thanks and Cheers........

Mah624, Sorry for the slow reply - I didn't get an alert notification for some reason,

SPContext.Current.Site returns an SPSite reference that is running within the activation user context because it uses the HttpContext.Current property internally. Thus, it will be running using the identity of the impersonated user. You can verify the user identity by adding the following line of code and running the code with the debugger attached:

In almost all cases when you use the RunWithElevatedPrivileges method, you have to create a new SPSite reference within the delegate to execute SharePoint API calls with the elevated privilege account.

Fan-Fan - The compile error is probably occurring because your delegate method is empty. Try adding a line of code inside the delegate and see if it compiles.

You shouldn't need to hardcode a user ID and password when using the RunWithElevatedPrivileges() method. Inside the delegate method, SharePoint will create objects under the context of an account which has full administrative privileges to the current web application (usually the LocalSystem account).

Here's a C# code snippet for running code with elevated privileges. You need to make sure that all API objects are created starting from the "site" reference in the following code. Part of the example shows what to do if you already have a list or list item reference that is running with normal privileges.

Hi,

Thanks for your reply...

Basically i'm not using SPList, SPListItem, SPFile and SPFolder....just SPSite and SPWeb.

Do i need to do that

I adopt your codes to mine as below:

FYI, this is for "button" execution part. Do i need to do the same to "Override" part

protected void btnExecuteSQL_Click(object sender, EventArgs e)

SPSite sViewUser = new SPSite("http://servername/");

SPWeb wViewUser = sViewUser.OpenWeb();

SPSecurity.RunWithElevatedPrivileges(delegate()

using (SPSite siteCollection = new SPSite(sViewUser.ID))

using (SPWeb site = siteCollection.OpenWeb(wViewUser.ID))

site.AllowUnsafeUpdates = true;

DataSet dsViewUser = new DataSet();

DataTable tViewUser = new DataTable();

tViewUser.Columns.Add(new DataColumn("Name"));

tViewUser.Columns.Add(new DataColumn("LoginID"));

tViewUser.Columns.Add(new DataColumn("Group"));

foreach (SPGroup gViewUser in site.SiteGroups)

{

foreach (SPUser uViewUser in gViewUser.Users)

string sGroup = gViewUser.Name;

if (uViewUser.Name.ToLower() == txtSQL.Text.ToLower())

DataRow rViewUser = tViewUser.NewRow();

rViewUser["Name"] = uViewUser.Name;

rViewUser["LoginID"] = uViewUser.LoginName;

rViewUser["Group"] = sGroup;

this.gvResults.DataSource = tViewUser;

this.gvResults.DataBind();