I am trying to work out why attribute based security isn\'t working as I\'d expect in WCF and I suspect it might have something to do with the following:
AppDoma
I believe the difference is between the logged in user and the account running the app (thread). These will not always be the same.