SharePoint安全...SPSecurity委托，一个值得我们去思考的问题

今天无意中发现SPSecurity.CodeToRunElevated 这个委托，确实很棒 ，一个无意识的发现，可以引发很多貌似不很重要的东西，却在项目中，引发很大的思考。。。希望大家看啦我的Demo能过明白，来引发出值得大家思考的东西
using System;
using System.Data;
using System.Configuration;
using System.Collections;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Web.UI.HtmlControls;
using Microsoft.SharePoint.WebControls;
using Microsoft.SharePoint;
namespace SPGridViewDemo
{
public partial class _Default : System.Web.UI.Page
{
protected void Page_Load(object sender, EventArgs e)
{
SPSecurity.CodeToRunElevated showLists = new SPSecurity.CodeToRunElevated(ShowLists);
SPSecurity.RunWithElevatedPrivileges(showLists);

}

protected void ShowLists()
{
DataTable entries = new DataTable("Entries");

entries.Columns.Add("ID", typeof(System.Int32));
entries.Columns.Add("SiteNav", typeof(string));
entries.Columns.Add("SiteName", typeof(string));
entries.Columns.Add("SiteURl", typeof(string));
entries.Columns.Add("ListName", typeof(string));
entries.Columns.Add("ListID", typeof(string));

entries.PrimaryKey = new DataColumn[] { entries.Columns["ID"] };

entries.Columns["ID"].AutoIncrement = true;
entries.Columns["ID"].AutoIncrementSeed = 1;
entries.Columns["ID"].AutoIncrementStep = 1;
entries.Columns["ID"].ReadOnly = true;

using (SPSite site = new SPSite(@"http://lh-vmpc:6060/"))
{
foreach (SPWeb web in site.AllWebs)
{
foreach (SPList list in web.GetListsOfType(SPBaseType.GenericList))
{
if(list.DoesUserHavePermissions(site.RootWeb.CurrentUser,SPBasePermissions.AddListItems) && list.BaseTemplate == SPListTemplateType.Tasks)
{
DataRow row = entries.NewRow();
row["SiteName"] = web.Title;
row["SiteNav"] = web.Url;
row["SiteUrl"] = web.Url;
row["ListName"] = list.Title;
row["ListID"] = list.ID;

entries.Rows.Add(row);
}
}
}
}

this.GridView1.DataSource = entries;
GridView1.DataBind();

}

}
}