Please consider following scenario:
public override void ItemUpdated(SPItemEventProperties properties)
{
SPSecurity.RunWithElevatedPrivileges(delegate()
{
SPWeb web1 = properties.Web; //this SPWeb object will have permissions of
//current user, regardless of running inside RWEP
SPWeb web2 = properties.OpenWeb(); //what permissions has this SPWeb object?
});
}
In event receiver, if I want to use Web from properties, then it will have permissions of current user, regardless of RWEP block. That's why I always created new instance of SPSite and SPWeb inside of RWEP block.
What permissions will SPWeb object have, if it is returned from OpenWeb()
method called inside of RWEP? Permissions of current user or permissions of System Account?