Authenticated User and Service Layer

Question

I have a MVC 4 application which uses a Service Layer in a different class library.

Some of the calls to that service layer needs to know which uses is requesting the data.

The data records is different depending on the User Roles.

For Prevent Coupling Issue, Should I pass the username in the request (HttpContext.User.Identity.Name) or should I access it directly on the service layer using the same HttpContext.User.Identity.Name .

I am never sure if I should hide the HttpContext from the service layer.

Answer 1

Simply pass the currently authenticated user as parameter to your service layer. Never use HttpContext.User.Identity.Name in your service layer.

For example:

[Authorize]
public ActionResult SomeAction()
{
    string user = User.Identity.Name;
    this.someService.SomeOperation(user);
    ...
}

Your service layer should never be tied to an HttpContext.