IPrincipal and IsInRole

From: Arturo (arturo-g_at_lycos.com)
Date: 08/27/04 

Date: 27 Aug 2004 04:11:18 -0700

Hello. I have a question:

My methods are implementing the <PrincipalPermission> attribute and
checking through role in the identity. I have implemented my own
Principal and Identity object. The user should logon and the info is
loaded from a database.

If this library exposes public methods and another developer makes a
console app and creates it's own implementation of IPrincipal and
IIdentity and always returns true in IsInRole, is he going to be able
to execute my code?

Is there any way to tag the method to request only Windows security or
My own security IPrincipal or IIdentity of type X, but nothing else?

Many thanks!