I’m wanting to make an Asp.Net MVC app, but before I start on non-UI stuff I need to get my head around this. If I have some web services, and they are stateless, is it necessary to pass in the currently-logged-in user as a parameter to service calls? Or does WCF have a mechanism that can handle this for me? Or is it better to keep security in the UI layer and not worry about permissions in the services?
Share
Check :