Access denied. When trying to upload files into SharePoint with PowerShell

Question

AM trying to upload a bunch of files into SharePoint using PowerShell. I have a code that works on my local machine, but when I get on the server, it does not. Here is what my block of code looks like
$webUrl = "http://SampleSite"
$libraryName = "My Lib"
$docLibraryUrlName = "My%20ContentType"
$fileLocation = "C:\test\"
$contentType = "My ContentType"
#Open web and library
$web = Get-SPWeb $webUrl
$docLibrary = $web.Lists[$libraryName]
$files = ([System.IO.DirectoryInfo] (Get-Item $fileLocation)).GetFiles()
ForEach($file in $files)
#Open file
$fileStream = ([System.IO.FileInfo] (Get-Item $file.FullName)).OpenRead()
# Gather the file name
$FileName = $File.Name
#remove file extension
$NewName = [IO.Path]::GetFileNameWithoutExtension($FileName)
#split the file name by the "-" character
$FileNameArray = $NewName.split("_")
#Add file
#$folder = $web.getfolder($docLibraryUrlName)
$folder = $web.getfolder($docLibrary)
write-host "Copying file " $file.Name " to " $folder.ServerRelativeUrl "..."
$spFile = $folder.Files.Add($folder.Url + "/" + $File.Name, $fileStream, $true)
$spItem = $spFile.Item
#populate metadata
$spItem["First Column"] = $FileNameArray[0]
$spItem["Second Column"] = $FileNameArray[1]
$spItem.Update()
$fileStream.Close();
Again, this code works fine on my local machine but doesn't when I move this to the server. When I step through the code, I noticed that when I look at the data returned for my $folder variable in this snippet
$folder = $web.getfolder($docLibrary)
It shows the EffectiveRawPermissions to be "Open, BrowseUserInfo, UserClientIntegration" on the server...however, the EffectiveRawPermissions on my local machine is "FullMask". Does this have any effect on the ability of my code to be
able to upload the files into SP on the server? I have never run into this issue, so am not sure how this makes sense...so I really appreciate any insight. Thanks
I am getting this error when the code attempts to perform the "Add" function...
Exception calling "Add" with "3" argument(s): "<nativehr>0x80070005</nativehr><nativestack></nativestack>Access denied."
At C:\PowerShellScripts\tester.ps1:70 char:3
+         $spFile = $folder.Files.Add($folder.Url + "/" + $File.Name, $fileStream, $true ...
+         ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : NotSpecified: (:) [], MethodInvocationException
    + FullyQualifiedErrorId : UnauthorizedAccessException
 ...Please help

Answer 1

RunWithElevatedPriv basically impersonates the webapp's app pool account, which should have full control over the entire webapp... this would work, but is not recommended for several reasons:
- first and foremost, you shouldn't NEED to bypass the SP security model
- second and still important, the app pool may be hosting other webapps as well, so the risk of a bug causing security-related problems within the RunWithElev codeblock is no longer scoped to the current webapp, but also other webapps that share the same
app pool account.
- third, same as number two, but for service accounts, and possibly even the farm... not a good practice, but a lot of SP installs aren't configured correctly, so the entire farm may be using one account... now, the RunWithElev is not just a webapp admin,
not just a multiple webapp admin, but may be able to affect service apps, or possibly the entire farm.
- fourth, the audit info (created by, modified by) will reference the system account, instead of your account... not a very accurate audit trail in that case.
If you have a legit need to add the files, you should be able to get the necessary permissions (which is basically just contribute within the library / folder) easily enough.
Scott Brickey
MCTS, MCPD, MCITP
www.sbrickey.com
Strategic Data Systems - for all your SharePoint needs