I've inherited an ASP.NET MVC3 + NInject application and I'm tasked with implementing virtual private databases at the SQL Server level. In order for this to work the credentials used to connect to SQL need to change based upon user.
How does one pass session-specific information into the repository implementation layer? I would rather not add parameters to every service and repository call.
Currently the connection string is set from a web.config entry when the repository objects are created.