In ancient times... at least according to web standards, I wrote a couple of posts about unit testing with declarative security attributes. It turns out that while using declarative security is pretty awesome, it's clear nobody was ...

See Part 1And Part 3In a previous post I talked about using the PrincipalPermissionAttribute to achieve some last resort security that was tightly integrated into the framework.The nice thing about this approach is that you don't have to...

See Part 2And Part 3Security is hard. If you think it isn't your software is probably just waiting to be exploited by this guy:Knowing this, the guys who put together the .Net framework gave us a pretty brain-dead approach to adding secu...