When working with the SharePoint object model, you quickly will encounter security issues with certain calls to classes and members within the WSS or SPS object model. There have been discussions on how to get around that by impersonation but do know that SharePoint sometimes reverts back to the original logged-on user. So, you will have to find other tricks. Basically, there are three, all of them involving your code being moved to somewhere else: a Web service, a COM+ app, or an AppDomain. Maurice has done some great stuff documenting the last technique and has done an update of the material yesterday. Take a look at it and keep it somewhere close since you might need it!