Re: Role based security flaw?

I wanted to thank everyone for their comments, they provided alot of
insight.

Its an internal only client app, so I'm not terribly worried security
(yet). I just wanted to get this question answered before I totally
buy into going the role based security route.

As far as what I'm doing, i'm tagging classes (Don't need anything that
too grained yet) with PrincipalPermissions, demanding that the user be
in a particular role and authenticated (The name of the role doesn't
include the domain part, so moving it between environments won't be
difficult).

Thanks again everyone.

.