Question

How to do Role based authentication in WCF using Windows authentication (Active Directory)?

I have a requirement where request shall be authenticated using Windows authentication (Active Directory). There shall be 2 roles defined. The roles shall be mapped to the user groups in the Active Directory.

Answer 1

Use PrincipalPermissionAttribute:

[PrincipalPermission(SecurityAction.Demand, Role = "MySpecialGroup")]
void SomeMethod()
{
   // Some Code
}

The role name is the AD group name.

If you need more control you can use PrincipalPermission:

void SomeMethod()
{
  if(!this.IsOwnedByCurrentUser())
  {
    PrincipalPermission pp = new PrincipalPermission(null, "SomeSpecialGroup");
    pp.Demand();
  }
}