CODEWITHSUNDEEP
securitysharepoint
Jakub Šturc
Jakub Šturc

Reputation: 35787

SPContext.Current.Web.CurrentUser returns misleading value

I'm trying to find out current user name for my sharepoint application. There are more that one way how to do this. However the sharepoint way returns misleading value. 

System.Security.Principal.WindowsIdentity.GetCurrent().Name // returns MY_COMPUTER\\my_user

HttpContext.Current.User.Identity.Name // returns MY_COMPUTER\\my_user

HttpContext.Current.Request.ServerVariables["AUTH_USER"] // returns MY_COMPUTER\\my_user

Microsoft.SharePoint.SPContext.Current.Web.CurrentUser.LoginName // returns SHAREPOINT\\system

What is the cause of this behavior? Will I encounter problems if I'll use non-sharepoint way?

Upvotes: 5

Views: 16807

Answers (5)

user432195
user432195

Reputation: 91

The problem is because you are probably getting the current user from an elevated SPWeb inside a RunWithElevatedPrivileges code. You can use the snippet below to get the real user

SPWeb site = SPContext.Current.Web;
SPSecurity.RunWithElevatedPrivileges(delegate()
{
    using (SPSite ElevatedsiteColl = new SPSite(siteColl.ID))
   {
       using (SPWeb ElevatedSite = ElevatedsiteColl.OpenWeb(site.ID))
       {
            string currUser = site.CurrentUser; //not the ElevatedSite.CurrentUser
       }
   }
});

This will show the real user name instead of the SHAREPOINT\System user.

Upvotes: 4

Ajju
Ajju

Reputation: 11

I think you might have include this code under SPSecurity.RunWithElevatedPriviliges. Check it out once. I am not sure though

Upvotes: 1

dahlbyk
dahlbyk

Reputation: 77580

The other way SPWeb.CurrentUser could return SHAREPOINT\system is if the web is elevated, though I'm not sure why SPContext.Current would be elevated. On what kind of page are you seeing this behavior?

Upvotes: 0

Nico
Nico

Reputation: 13840

This is expected if the user is the application pool account running the current web application.
BTW, it's supposed to be the same name as displayed in the welcome control (upper left control)

Upvotes: 5

jwmiller5
jwmiller5

Reputation: 2604

Are you browsing as the admin account that you used to install the system? SharePoint will "helpfully" rename that SHAREPOINT\System. Use a different account and all of the methods will return the same value.

Upvotes: 6

Related Questions