PrincipalPermission attribute on Service contract
See the question and my original answer on StackOverflowThe role is checked at runtime, using the attributes put on the implementing method, not the attributes put on the interface the method implements. More generally in .NET there is not direct relation between custom attributes put on a method and custom attributes put on the corresponding interface method, if any.