IAuthorizationService Interface

The Authorization Service provides consumers with an access control system for the Team Foundation Server. The Authorization Service is used to register securable objects and grant, deny, or check permissions on those objects. It is the preferred method of control for other Team Foundation services. However, consumers such as the TFS Version Control service can augment this system by implementing their own authorization logic. Although consumers can implement custom authorization logic, the Group Security Service should still be used for resolving group membership queries to enable centralized administration of identities on the Team Foundation Server.