Question

当激活网站功能时, 我自动要设置 WebApplication 属性。这是代码 :

   public override void FeatureActivated(SPFeatureReceiverProperties properties)
        {             
                SPWeb currentWeb = ContentTypes.ValidateFeatureActivation(properties);
                using (SPSite site = new SPSite(currentWeb.Site.Url))
                {
                    SPWebApplication currentApplication = site.WebApplication;
                    if (currentApplication.MaxQueryLookupFields < 20)
                    {

                        SPSecurity.RunWithElevatedPrivileges(delegate()
                        {
                            try
                            {
                                currentApplication.MaxQueryLookupFields = 20;
                            }

                            catch (System.Security.SecurityException ex)
                            {
                                _log.ErrorFormat("no permission");
                            }
                        });

                    }
                }                
        }

即使我有一个农场管理员激活了这个功能, 安全例外也会被抛出(“拒绝进入” ) 。

currentApplication.MaxQueryLookupFields = 20;

AFAIK SP Security. Run with the Leveled Privitees 运行作为一个网站管理者, 农场管理者是“ 强势的” / 强势的。但如何做到这一点呢? (WITHOUT run On with the leveled Privites I gets 相同例外 ) 。

Answer 1

您需要在 SPS Security. Run with levelated Privictees 内创建新的 SPSite、 SPWeb 和 SPWebApplication 对象。否则您将使用与当前用户相同的权限运行它们。例如。

    public override void FeatureActivated(SPFeatureReceiverProperties properties)
        {
        SPSecurity.RunWithElevatedPrivileges(delegate()
             {             
                SPWeb currentWeb = ContentTypes.ValidateFeatureActivation(properties);
                using (SPSite site = new SPSite(currentWeb.Site.Url))
                {
                    SPWebApplication currentApplication = site.WebApplication;
                    if (currentApplication.MaxQueryLookupFields < 20)
                    {
                            try
                            {
                                currentApplication.MaxQueryLookupFields = 20;
                            }

                            catch (System.Security.SecurityException ex)
                            {
                                _log.ErrorFormat("no permission");
                            }


                    }
                }
            });                
        }

Answer 2

您应该立即在 RWEP 中安装另一个SPSite 对象, 以获得应用程序集合身份背景, 因为第一个在RWEP 区块外创建的SPSite 是用当前SPSite 用户环境创建的。请尝试这个 :

public override void FeatureActivated(SPFeatureReceiverProperties properties)
    {
        SPWeb currentWeb = ContentTypes.ValidateFeatureActivation(properties);
        using (SPSite site = new SPSite(currentWeb.Site.Url))
        {
            SPSecurity.RunWithElevatedPrivileges(delegate()
            {
                using (SPSite _site = new SPSite(site.ID))
                {
                    SPWebApplication currentApplication = _site.WebApplication;
                    if (currentApplication.MaxQueryLookupFields < 20)
                    {
                        try
                        {
                            currentApplication.MaxQueryLookupFields = 20;
                        }
                        catch (System.Security.SecurityException ex)
                        {
                            _log.ErrorFormat("no permission");
                        }
                    }
                }
            });
        }
    }

友情链接