ASP。NET MVC安全性——您应该在哪个层检查用户是否被授权查看实体?

I have a multi-layer (but not multi-tier) ASP.NET application that needs to check if the logged in user is authorized to view/edit an entity. I can think of several implementations:I have a multi-layer (but not multi-tier) ASP.N