Access Denied error with custom webpart

Question

I have an internal portal/sharepoint site with a custom webpart used to serve up Crystal Reports reports. Currently I need to give Buitlin/Users Site Auditor permission in "User Policy" for the web application or they get an access denied error. I think it is something to do with a RunWithElevatedPrivileges command that is not correct. Also Site admins have no problems opening the reports.

 SPSecurity.RunWithElevatedPrivileges(delegate()
        {
            AddSites(SPWebApplication.Lookup(uri).Sites[0].AllWebs));

        if (!string.IsNullOrEmpty(webpart.Department))
        {
            reportsSiteList.SelectedValue = webpart.Department;

does this look correct? if so, any ideas about the access denied errors?

Answer 1

You should also use the site context with in the elevated privileges code. code sample below:

SPSecurity.RunWithElevatedPrivileges(delegate()
{
    //New SPSite object.
     using (SPSite site = new SPSite(web.Site.ID))
     {
    //Do things by assuming the permission of the "system account".
     }
});

Additionally, verify what is the service account used for the app pool used in the current web applications. generally, elevated priviliges code runs with the context of app pool account and that account should have full priviliges.