Creating a New User Group inside my item update Event Reciever

Question

I am working on a SharePoint server 2013, and using the UI i can do the following:-

1. Inside the site collection >>site settings >> site permission >>Create Group >> give it a name >> keep the owner as is (my username).
2. create the group.
3. edit the group
4. define that the Group name is the owner.
5. define that only group members can view the membership.
6. define that Group owners can add members.
7. go to a sub-site (which have unique permission), assign the new group and give it Contribute permission.

now i have an event receiver which get fired when an item is updated inside the sub-site. now inside this event receiver i am creating a new sub-site and i want to do the above 7 steps. i start wit the following :-

 public override void ItemUpdated(SPItemEventProperties properties)
        {
            base.ItemUpdated(properties);

                SPSecurity.RunWithElevatedPrivileges(delegate()
                {
                    using (SPSite site = new SPSite(properties.SiteId))

                    {

                        string currenweburl = properties.RelativeWebUrl;
                        using (SPWeb spCurrentSite = site.OpenWeb(currenweburl))
                        {
                            SPWebCollection subWebs = spCurrentSite.Webs;
                            String curListName = properties.ListTitle;

                                //Get the SPListItem object that raised the event
                                    SPListItem curItem = properties.ListItem;
                                //Get the Title field from this item. This will be the name of our new subsite
                                    String curItemSiteName = properties.ListItem["Title"].ToString();
                                    String curItemID = properties.ListItemId.ToString();
                                    SPWeb rootWeb = spCurrentSite.Site.RootWeb;
                                    String webTemplateName = "New Project Template"; //this is the name of the template we will use

                                    //Create the subsite based on the template from the Solution Gallery

                                    SPWeb newSite = spCurrentSite.Webs.Add(curItemID, curItemSiteName, "created automatically", Convert.ToUInt16(1033), webTemplate, false, false);

                                    //Set the new subsite to inherit it's top navigation from the parent site, Use false if you do not want this.

                                    //Code to cover the 7 Steps

                                    site.RootWeb.SiteGroups.Add(curItemSiteName,**** , *****, "Your Group Description");
                                    SPGroup group2 = site.RootWeb.SiteGroups[curItemSiteName];


                                    // Add the group's permissions
                                    SPRoleDefinition roleDefinition = site.RootWeb.RoleDefinitions.GetByType(SPRoleType.Contributor);
                                    SPRoleAssignment roleAssignment = new SPRoleAssignment(group2);
                                    roleAssignment.RoleDefinitionBindings.Add(roleDefinition);
                                    site.RootWeb.RoleAssignments.Add(roleAssignment);
                                    site.RootWeb.Update(); 

but i got confused on how i need to implement my last block commented by //Code to cover the 7 Steps .. as seems when creating new group some parameters is SPMember() which other is SPUser().. and not sure where i define the setting to force only members to view the group members. can anyone advice on this please?

Answer 1

Try adding RoleAssigments to the new web, doing something like this (I edited a bit your code):

public override void ItemUpdated(SPItemEventProperties properties)
{
    base.ItemUpdated(properties);

    SPSecurity.RunWithElevatedPrivileges(delegate ()
    {
        using (SPSite site = new SPSite(properties.SiteId))
        {
            using (SPWeb spCurrentSite = site.OpenWeb(properties.RelativeWebUrl))
            {
                var subWebs = spCurrentSite.Webs;
                var curList = spCurrentSite.Lists.TryGetList(properties.ListTitle);
                if (curList == null) return;

                //Get the SPListItem object that raised the event
                var curItem = curList.GetItemById(properties.ListItemId);

                //Get the Title field from this item. This will be the name of our new subsite
                var curItemSiteName = curItem[SPBuiltInFieldId.Title].ToString();
                var curItemID = properties.ListItemId.ToString();

                // Get the template
                var webTemplateName = "New Project Template"; //this is the name of the template we will use
                var webTemplate = ****;

                //Create the subsite based on the template from the Solution Gallery
                SPWeb newSite = spCurrentSite.Webs.Add(curItemID, curItemSiteName, "created automatically", Convert.ToUInt16(1033), webTemplate, false, false);

                //Set the new subsite to inherit it's top navigation from the parent site, Use false if you do not want this.
                // *****

                //Code to cover the 7 Steps

                site.RootWeb.SiteGroups.Add(curItemSiteName, **** , ****, "Your Group Description");
                var group2 = site.RootWeb.SiteGroups[curItemSiteName];

                //edit group settings
                group2.AllowMembersEditMembership = true;
                group2.OnlyAllowMembersViewMembership = true;
                group2.Owner = group2;
                group2.Update();

                // break Inheritance
                newSite.BreakRoleInheritance(false);

                // Add the group's permissions
                var roleDefinition = site.RootWeb.RoleDefinitions.GetByType(SPRoleType.Contributor);
                var roleAssignment = new SPRoleAssignment(group2);
                roleAssignment.RoleDefinitionBindings.Add(roleDefinition);
                newSite.RoleAssignments.Add(roleAssignment);
                newSite.Update();
            }
        }
    });
}

Do not use properties.ListItem inside the SPSecurity.RunWithElevatedPrivileges (security is loaded from the context). You need to get a new instance of the list item.

Answer 2

Try below code:

 //break new site inheritance
newSite.BreakRoleInheritance(true);
site.RootWeb.SiteGroups.Add(curItemSiteName,web.SiteUsers[@"domain\user"], web.SiteUsers[@"domain\user"], "Your Group Description");
//site.RootWeb.SiteGroups.Add(curItemSiteName,web.SiteUsers[@"domain\user"], null, "Your Group Description");

SPGroup group2 = site.SiteGroups[curItemSiteName];

//add group to subsite with contribute permissions
SPRoleDefinition roleDefinition = site.RootWeb.RoleDefinitions.GetByType(SPRoleType.Contributor);
SPRoleAssignment roleAssignment = new SPRoleAssignment(group2);
roleAssignment.RoleDefinitionBindings.Add(roleDefinition);
newSite.RoleAssignments.Add(roleAssignment);
newSite.Update();

//edit group settings
group2.AllowMembersEditMembership = true;
group2.OnlyAllowMembersViewMembership = true;
group2.Owner = group2;
group2.Update();
newSite.Update();