Question

Can anyone suggest which extensibility point i should use if i want to execute my code before the serviceAuthorization’s CheckAccess method get called.

I tried with a custom Service behavior, that adds message inspectors, but they get called after the authorization…

many thanks

Answer 1

I would try creating a custom ServiceAuthorization class and overriding the CheckAccessCore-method.

namespace Test
{
    public class ServiceAuthorization : ServiceAuthorizationManager
    {
        protected override bool CheckAccessCore(OperationContext operationContext)
        { // Do custom stuff here...
        }
     }
 }

Now configure your web.config to use this ServiceAuthorization class:

<behaviors>
  <serviceBehaviors>
    <behavior>
      <serviceAuthorization principalPermissionMode="Custom" serviceAuthorizationManagerType="Test.ServiceAuthorization">
      </serviceAuthorization>
    </behavior>
   </serviceBehaviors>
</behaviors>