Custom Authorization Framework in WCF Service layer

Hi,

� 

Need some help over authorization framework we can consider for following requirements

� 

Infrastructure:

UI- Windows forms

Middle tier - WCF Services provides services to UI layer

DB- SQL

� 

Intranet application

User information will be maintained in Active Directory and DB

� 

� 

As of now WCF is configured for wsHttpBinding with secure conversation enabled( this takes care of authentication for me..)

� 

Authentication requirements

� 

1. There will be� different types of forms ( ex: Form to enter� Order info, form to enter payment info)� 

� 

2.� Each form will have contacts and t ...