SharePoint 2010 Error when using elevated privilege:The security validation for this page is invalid


During our execution of one of our engagements ,we’ve faced a problem of this error getting displayed “The security validation for this page is invalid”

what we were trying to do is to grant permissions in code running in elevated privilege for users dynamically using the following code:

SPSite siteColl = SPContext.Current.Site;

     SPWeb site = SPContext.Current.Web;

     //run with app pool identity



using (SPSite ElevatedsiteColl = new SPSite(siteColl.ID))


       using (SPWeb wb = ElevatedsiteColl.OpenWeb(site.ID))




      code to assign permissions dynamically than runs in AppPool Identity…….

Issue were fixed by setting the following property to false,


and SPSite.AllowUnsafeUpdates ,SPWeb.AllowUnsafeUpdates to true



by adding the following lines in our try block:

//To Fix security validation error

ElevatedsiteColl.WebApplication.FormDigestSettings.Enabled = false;

ElevatedsiteColl.AllowUnsafeUpdates = true;

wb.AllowUnsafeUpdates = true;

and in our finally block we reset the values to its initial state




  ElevatedsiteColl.WebApplication.FormDigestSettings.Enabled = true;

  wb.AllowUnsafeUpdates = false;

  ElevatedsiteColl.AllowUnsafeUpdates = false;


there is another approach by disabling the security validation for the entire web using central administration which I think will cause additional risk for security in the whole web application to fix issue related to one piece of code!



Comments (1)

  1. sasi kumar reddy says:

    Thanks for the post. Below post will helps us on how to use and avoid access denied issues while using RunwithElevatedPrivileges best practice

    Sasi kumar Reddy