0

http://msdn.microsoft.com/en-us/library/system.web.http.filters.authorizationfilterattribute(v=vs.118).aspx

States

Any public static (Shared in Visual Basic) members of this type are thread safe. Any instance members are not guaranteed to be thread safe.

Does this mean that the following would not be safe to use as a custom asp.net mvc authorization filter attribute because MyCustomRoles is an instance member?

public class MyAuthorizationFilterAttribute : AuthorizationFilterAttribute
{
    // authorized users
    public string MyCustomRoles { get; set; }

    // ...
}
Mr Grok
  • 3,876
  • 5
  • 31
  • 40

1 Answers1

1

Assuming this attribute is set by the calling code:

[MyAuthorizationFilter(MyCustomRoles = "abc")]

then this property is safe to be used.

See this similar post of mine for more detailed explanation of cases where it is not safe.

Community
  • 1
  • 1
Darin Dimitrov
  • 1,023,142
  • 271
  • 3,287
  • 2,928
  • It is indeed. The last couple of comments of yours in your linked post were particularly useful. Thanks. – Mr Grok Dec 16 '13 at 12:08