I know that there are a lot of people struggling with security problems when programming against the WSS object model. Victor from Macaw has a good posting explaining the revert to the application pool identity trick (abbreviated as RAPPIT :-) ). Will keep that trick in my archive in case I ever run into those problems again.