Accessed denied when attempting to permission folder using the Object Model API

Question

I'm attempting to permission a folder using the Object Model API that is created by an ASP.NET page wrapped into a feature. I am able to create and permission the folder for users that are in the appropriate SharePoint role however, I need to permission the folders that are also in more restrictive roles. The folders are created with no problem but I need to break the inheritance and permission the folder.

I attempted to wrap the folder creation/permission code in

SPSecurity.RunWithElevatedPrivileges(delegate() { ... });

I also tried using

web.AllowUnsafeUpdates = true; 

and

web.Site.WebApplication.FormDigestSettings.Enabled = false;
...
web.Site.WebApplication.FormDigestSettings.Enabled = true;

The folder is always created however it does not permission properly. Any feedback/direction would be appreciated. Thanks.

Answer 1

Have you tried impersonating a user with the necessary rights:

http://blackninjasoftware.com/2009/04/09/how-to-programmatically-impersonate-users-in-sharepoint/

Answer 2

Did you get a new instance of SPWeb inside the RunWithElevatedPrivileges delegate? If not, it will use the same credentials as the original request.

Answer 3

I ended up getting it to work with a combination of Koen Vosters answer and this link.

After impersonating the user I had to use:

web.AllowUnsafeUpdats = true;
...
list.BreakRoleinheritance(true);
web.AllowUnsafeUpdates = true;
while (list.RoleAssignments.Count > 0)
{
   list.RoleAssignments.Remove(0);
}
...
//Add necessary permissions