Remoting Demands
You should be aware that if your objects are remotable (derived from a MarshalByRefObject) and are accessed remotely across processes or computers, code access security checks such as Demand, LinkDemand, and InheritanceDemand are not enforced. This means, for example, that security checks do not go over SOAP in Web services scenarios. However, code access security checks do work between application domains. It's also worth noting that remoting is supported in fully trusted environments only. That said, code that's fully trusted on the client might not be fully trusted in the server context.