asp.net mvc authorizationfilterattribute thread safe

1.4k views Asked by At

http://msdn.microsoft.com/en-us/library/system.web.http.filters.authorizationfilterattribute(v=vs.118).aspx

States

Any public static (Shared in Visual Basic) members of this type are thread safe. Any instance members are not guaranteed to be thread safe.

Does this mean that the following would not be safe to use as a custom asp.net mvc authorization filter attribute because MyCustomRoles is an instance member?

public class MyAuthorizationFilterAttribute : AuthorizationFilterAttribute
{
    // authorized users
    public string MyCustomRoles { get; set; }

    // ...
}
1

There are 1 answers

1
Darin Dimitrov On BEST ANSWER

Assuming this attribute is set by the calling code:

[MyAuthorizationFilter(MyCustomRoles = "abc")]

then this property is safe to be used.

See this similar post of mine for more detailed explanation of cases where it is not safe.