So...i did what was suggested above. I received note back from support saying i can do that myself in the "File manager" (which i had previously done anyway. I didn't realize that the file manager would be necessarily granting the privs to the asp.net worker id, i didn't know exactly what it would do....anyway....)
So bottom line, it appears that the host id has the priv. I should mention also that i have 2 gallery pages on the site, and i can add pictures/edit albums on one...but he second one returns the error.
I don't know much about trust settings, but in the return email they mention this:
Our ASP.NET 3.5 and 4.0 shared hosting servers use the default Medium trust level with the addition of OleDbPermission, OdbcPermission, and a less-restrictive WebPermission.
Applications operating under a Medium trust level have no registry access, no access to the Windows event log, and cannot use ReflectionPermission (but can use Reflection). Such applications can communicate only with a defined range of network addresses and file system access is limited to the application's virtual directory hierarchy.
any other ideas?
thanks, Dave