How safe is using ElevatedPrivilegesScope to access a Component Tridion, if it is not accessible by the user

Question

I have a configuration Component in the Gloabal/Shared publication, We have Event System code which reads this Configuration Component using current component session, but in case if the current user does not have access to the Shared publication then Event System fails. i saw this post to ElevatePrivilages to sysadmin,and also gone through this post and the code is below

using (ElevatedPrivilegesScope scope = new ElevatedPrivilegesScope(nonAdminSession, Privileges.SysAdmin))
{
    // Do your admin tasks
}

but i am afraid to use it as we have nlb in prod , if in any case any server gets down(in case of some outage or xyz reason) and at the same time when the event is triggered and somehow RestorePrivileges does not execute then the normal user will has all the privileges as admin an will start experiencing new cme with all the access of publications? please correct me if i am wrong.

Answer 1

What you are worried about -- the user somehow being left as an administrator - will not happen when you use ElevatedPrivilegesScope.

The elevation only applies to the scope, not to the user, so even if your code throws an exception afterwards there is no harm done. Heck, even if the user does actions while your code is running, they are not able to do anything other than what their normal permissions allow. Because again, it's not that the user's permissions are temporarily increased -- it's more that your code will do actions on behalf of the user without having to be constrained by their permissions.