Is creating a custom PrincipalPermission attribute a good idea?

Question

I need to check for both Roles and a concept called Privilieges, which is distinct from roles in a WCF service.

As PrincipalPermission is sealed, I was thinking about creating a custom attribute for the same.

Is this a good idea?

Answer 1

The Role concept for permissions is fairly simplistic and does not allow sufficient granularity for many applications. If you create your own IPermission implementation it works very nicely. This answer provides a little more detail.