leastprivilege.com
Context.User vs. Thread.CurrentPrincipal
The whole .NET authentication/authorization infrastructure is centered around two interfaces: IIdentity (taking care of who the user is – authentication) and IPrincipal (coupling roles with t…