I'm creating a 'Contact Us' webpart with form to allow anonymous user to send a message which will be added to a SharePoint List.

However I cannot grant the anonymous user the permission to Add element to List (and therefore the permission to View the List) because he isn't supposed to see all of the messages that were previously sent by other people.

I've tried to use the following code:

SPSite siteContext = SPContext.Current.Site;
    using (SPSite elevatedSite = new SPSite(siteContext.ID))
        using (SPWeb web = elevatedSite.RootWeb)
            web.AllowUnsafeUpdates = true;
            SPList list = web.Lists.TryGetList("Messages");

            Guid listGuid = list.ID;
            if (listGuid != null)
                RichTextField MessageField = new RichTextField();
                MessageField.ControlMode = SPControlMode.New;
                MessageField.ListId = listGuid;
                MessageField.FieldName = "Message";

            web.AllowUnsafeUpdates = false;

But when the anonymous user proceeds to the page, the MessageField isn't rendered at all.

I guess it's because the code is pointing the field to a list which the user doesn't have access to.

What am I doing wrong? Am I missing something in my code with RunWithElevatedPrivileges? Any help would be appreciated.

2 Answers 2


Inspired by this post: https://sharepoint.stackexchange.com/a/36311/17191 I finally got it to work.


SPList list = web.Lists.TryGetList("Messages");

I've added the line:

SPContext renderContext = SPContext.GetContext(HttpContext.Current, null, list.ID, web);

and now anonymous user can access a site with this control (without actually having any permissions to the List).

  • Mark as answer if it legitimately works. :)
    – Ashley
    Commented May 30, 2013 at 22:24

Have a look at the SharePoint logs. What error message are you getting? You can use this tool: http://archive.msdn.microsoft.com/ULSViewer

You can enable Anonymous Access by going to Application Management in Central Administration, Highlight the WebApop where you want to enable Anonymous Authentication, Click on Authentication Providers, Click on the Zone where you want to enable Anonymous Access, then Check Enable Anonymous Access, Save.

Go to your Web Application and the top level of the site collection > Site Actions > Site Settings > Site Permissions > Anonymous Access > Entire web Site

Check also the settings in the IIS Manager. Go to your site and open the point Authentication. Check if Anonymous Authentication is enabled. Only then the IIS will let your anonymous request pass.

enter image description here

Here is a good link: http://blog.drisgill.com/2009/11/sp2010-branding-tip-9-turn-on-anonymous.html

  • 1
    The actions you mention above were taken by me in the first place. If I didn't do them not only the MessageField wouldn't render but the page would throw 401 Error (Unauthorized). Commented May 29, 2013 at 21:44
  • Yep that's right :) Sorry i did not notice that you have called the context from outside the elevated part.
    – hupseb
    Commented Jun 3, 2013 at 7:21

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.