I'm trying to decide on an application architecture for a data driven application. My application will be available to any number of businesses, but each business should only be able to access their own data.
When I look at OData, I'm curious as to how you limit access. Or am I supposed to create a business layer (WCF Service) that does the filtering?
If I have to create a separate business layer, than why not go direct to the data with that and eliminate the OData service?
What am I missing?
http://digitalcamel.blogspot.com/