Triggering Authorization Rules on the Server

I've set up static Auth Rules on my object by creating a method on it:

     public static void AddObjectAuthorizationRules()

In which I add to the static BusinessRules collection:

     BusinessRules.AddRule(typeof(MyObject), ... etc

I have CSLA set for 3-Tier usage, and I can see that the Authorization rules get checked in the client when the DataPortal is used.

However, when it hits the server DataPortal it doesn't seem check the rules.  As this will be a publicly available server, I need it to check the rules on the server too.

Is there an easy way to configure the server DataPortal to also check the Authorization rules? I couldn't see anything in the CSLA books. 

I am using 4.5.501.0