Middle Tier Security - WCF Service

static void Main(string[] args) {
    try {
        // ...
        ServerApplication serverApplication = new ServerApplication();
        serverApplication.ApplicationName = "MySolution";

        serverApplication.Modules.BeginInit();
        serverApplication.Modules.Add(new DevExpress.ExpressApp.Security.SecurityModule());
        serverApplication.Modules.Add(new MySolution.Module.Win.MySolutionWindowsFormsModule());
        serverApplication.Modules.Add(new MySolution.Module.Win.MySolutionAspNetModule());
        serverApplication.Modules.EndInit();

        // ...
        Func dataServerSecurityProvider = () => {
            SecurityStrategyComplex security = new SecurityStrategyComplex(
                typeof(PermissionPolicyUser), typeof(PermissionPolicyRole), new AuthenticationStandard());
            security.SupportNavigationPermissionsForTypes = false;
            return security;
        };
        serviceHost = new WcfXafServiceHost(connectionString, dataServerSecurityProvider);
        serviceHost.AddServiceEndpoint(typeof(IWcfXafDataServer), 
            WcfDataServerHelper.CreateNetTcpBinding(), "net.tcp://localhost:1451/DataServer");
        serviceHost.Open();
        // ...
    }
    catch(Exception e) {
        Console.WriteLine("Exception occurs: " + e.Message);
        Console.WriteLine("Press Enter to close.");
        Console.ReadLine();
    }
}

Shared Sub Main(ByVal args() As String)
    Try
        ' ...
        Dim serverApplication As New ServerApplication()
        serverApplication.ApplicationName = "MySolution"

        serverApplication.Modules.BeginInit()
        serverApplication.Modules.Add(New DevExpress.ExpressApp.Security.SecurityModule())
        serverApplication.Modules.Add(New MySolution.Module.Win.MySolutionWindowsFormsModule())
        serverApplication.Modules.Add(New MySolution.Module.Win.MySolutionAspNetModule())
        serverApplication.Modules.EndInit()

        ' ...
        Dim dataServerSecurityProvider As Func = Function()
            Dim security As New SecurityStrategyComplex( _
            GetType(PermissionPolicyUser), GetType(PermissionPolicyRole), New AuthenticationStandard())
            security.SupportNavigationPermissionsForTypes = False
            Return security
        End Function
        serviceHost = New WcfXafServiceHost(connectionString, dataServerSecurityProvider)
        serviceHost.AddServiceEndpoint(GetType(IWcfXafDataServer), _
        WcfDataServerHelper.CreateNetTcpBinding(), "net.tcp://localhost:1451/DataServer")
        serviceHost.Open()
        ' ...
    Catch e As Exception
        Console.WriteLine("Exception occurs: " & e.Message)
        Console.WriteLine("Press Enter to close.")
        Console.ReadLine()
    End Try
End Sub

<?xml version="1.0"?>
<configuration>
  <connectionStrings>
    <add name="ConnectionString" connectionString=
        "Integrated Security=SSPI;Pooling=false;
        Data Source=.\SQLEXPRESS;Initial Catalog=MySolution" />
  </connectionStrings>
</configuration>

using System.ServiceModel;
using DevExpress.ExpressApp.Security.ClientServer.Wcf;
// ...  
winApplication.ConnectionString = "net.tcp://localhost:1451/DataServer";
winApplication.DatabaseUpdateMode = DatabaseUpdateMode.Never;
WcfSecuredClient wcfSecuredClient = new WcfSecuredClient(WcfDataServerHelper.CreateNetTcpBinding(), new EndpointAddress(connectionString));
MiddleTierClientSecurity security = new MiddleTierClientSecurity(wcfSecuredClient);
security.IsSupportChangePassword = true;
winApplication.Security = security;
winApplication.CreateCustomObjectSpaceProvider +=
    delegate(object sender, CreateCustomObjectSpaceProviderEventArgs e) {
        e.ObjectSpaceProvider = new MiddleTierServerObjectSpaceProvider(wcfSecuredClient);
    };
winApplication.Setup();
winApplication.Start();
wcfSecuredClient.Dispose();

Imports System.ServiceModel
Imports DevExpress.ExpressApp.Security.ClientServer.Wcf
' ...  
winApplication.ConnectionString = "net.tcp://localhost:1451/DataServer"
winApplication.DatabaseUpdateMode = DatabaseUpdateMode.Never
Dim wcfSecuredClient As New WcfSecuredClient(WcfDataServerHelper.CreateNetTcpBinding(), New EndpointAddress(connectionString))
Dim security As New MiddleTierClientSecurity(wcfSecuredClient)
security.IsSupportChangePassword = True
winApplication.Security = security
AddHandler winApplication.CreateCustomObjectSpaceProvider, Sub(sender As Object, e As CreateCustomObjectSpaceProviderEventArgs) e.ObjectSpaceProvider = New MiddleTierServerObjectSpaceProvider(wcfSecuredClient)
winApplication.Setup()
winApplication.Start()
wcfSecuredClient.Dispose()

public partial class MySolutionWindowsFormsApplication : WinApplication {
    //...
   private void MySolutionWindowsFormsApplication_DatabaseVersionMismatch(
        object sender, DevExpress.ExpressApp.DatabaseVersionMismatchEventArgs e) {
        throw new InvalidOperationException(
            "The application cannot connect to the specified database " +
            "because the latter does not exist or its version is older " +
            "than that of the application.");
        }
    }
}

Partial Public Class MySolutionWindowsFormsApplication
Inherits WinApplication
    ' ...
    Private Sub MySolutionWindowsFormsApplication_DatabaseVersionMismatch(ByVal sender As Object, _
    ByVal e As DevExpress.ExpressApp.DatabaseVersionMismatchEventArgs) _
    Handles MyBase.DatabaseVersionMismatch
        Throw New InvalidOperationException( _
        "The application cannot connect to the specified database because " & _
        "the latter does not exist or its version is older than " & _
        "that of the application.")
    End Sub
End Class

using DevExpress.Persistent.BaseImpl.PermissionPolicy;
// ...
public sealed partial class MySolutionModule : ModuleBase {
    // ...
    protected override IEnumerable<Type> GetDeclaredExportedTypes() {
        List<Type> result = new List<Type>(base.GetDeclaredExportedTypes());
        result.AddRange(new Type[] { typeof(PermissionPolicyUser), typeof(PermissionPolicyRole) });
        return result;
    }
}

Imports DevExpress.Persistent.BaseImpl.PermissionPolicy
' ...
Public NotInheritable Partial Class MySolutionModule
    Inherits ModuleBase
    ' ...
    Protected Overrides Function GetDeclaredExportedTypes() As IEnumerable(Of Type)
        Dim result As New List(Of Type)(MyBase.GetDeclaredExportedTypes())
        result.AddRange(New Type() { GetType(PermissionPolicyUser), GetType(PermissionPolicyRole) })
        Return result
    End Function
End Class

WcfXafServiceHost serviceHost = new WcfXafServiceHost(connectionString, dataServerSecurityProvider);
ServiceDebugBehavior debug = serviceHost.Description.Behaviors.Find<ServiceDebugBehavior>();
if(debug == null) {
    serviceHost.Description.Behaviors.Add(
    new ServiceDebugBehavior() { IncludeExceptionDetailInFaults = true });
}
else {
    if(!debug.IncludeExceptionDetailInFaults) {
        debug.IncludeExceptionDetailInFaults = true;
    }
}

Dim serviceHost As New WcfXafServiceHost(connectionString, dataServerSecurityProvider)
Dim debug As ServiceDebugBehavior = serviceHost.Description.Behaviors.Find(Of ServiceDebugBehavior)()
If debug Is Nothing Then
    serviceHost.Description.Behaviors.Add(New ServiceDebugBehavior() With {.IncludeExceptionDetailInFaults = True})
Else
    If Not debug.IncludeExceptionDetailInFaults Then
        debug.IncludeExceptionDetailInFaults = True
    End If
End If