Web part giving 401 on public facing site

Question

I have created a Blog in my site and change its layout. I'm using a webpart which is giving 401 error on public facing site.

My Code is:

public void CustomBlogLayout()
{
    SPSite thisSite = SPContext.Current.Site;
    using (SPWeb targetWeb = thisSite.AllWebs["/en-us/blogs/"])
    {
        SPList Forms = targetWeb.Lists["Posts"];
        SPQuery qry = new SPQuery();
        qry.Query = @"<Query>" +
                        "<OrderBy>" +
                            "<FieldRef Ascending='FALSE' Name='Modified' />" +
                            "</OrderBy>" +
                     "</Query>";
        SPListItemCollection SPLIC = Forms.GetItems(qry);
        LiteralControl print = null;
        string tlink = string.Empty;
        foreach (SPListItem item in SPLIC)
        {
            tlink = "/en-us/blogs/Lists/Posts/Post.aspx?&ID=" + item.ID;

            string[] authorInfo = item["Author"].ToString().Split(';');
            string authorId = authorInfo[0];
            string author = authorInfo[1].Replace("#", string.Empty);
            string alink = "/en-us/blogs/_layouts/userdisp.aspx?ID=" + Convert.ToInt32(authorId);

            string body = item["Body"].ToString();

            print = new LiteralControl("<div class='ms-PostTitle' ><a href=" + tlink + " >" + item["Title"].ToString() + "</a></div>" +
                                        "<div class='ms-PostFooter' > by " + "<a href=" + alink + " >" + author + "</a>\t" + "on " + item["Modified"].ToString() + "</div>" +
                                        "<div class='ms-PostBody' >" + item["Body"].ToString() + "</div>"
                                       );
            this.Controls.Add(print);
        }
    } 
}

Thanks in Advance

Answer 1

The thisSite.AllWebs is loading all webs so unless all of the allow anonymous access this will fail.

Replace it with

using (SPWeb targetWeb = thisSite.OpenWeb("/en-us/blogs/")) 

or

SPWeb targetWeb = SPContext.Current.Web

Answer 2

SPContext is a user aware object that will give you security exceptions in a lot of cases when used on an public facing web site without any authentication.

Create new SPSite/SPWeb objects instead:

using( var site = new SPSite( yourUrlHere ))
{
    using (var web = site.OpenWeb( yourUrl ))
    { rest of your code here... }

Answer 3

use RunWithElevatedPrivileges delegation

SPSecurity.RunWithElevatedPrivileges(delegate()
            {

                using (SPSite site = new SPSite(bla bla..)
                {  
                    //my code
                }
            });