Hi TS,
As for where to store the custom roles, I think there are several means,
such as
1. store in xml configure file.
2. store in Active Directory
3. store in database
The #1 is suitable for small and simple set of users and roles or test
condition.
#2 is a good approach and commonly used because it makes use of the
existing established accounts and roles within the OS/Domain but if is not
very flexible for defining custom user roles.
#3 Database is a good solutoin for define custom users and roles, which
could be separated form the OS or Domain's account or groups.
Just some of my opinions. Hope helps. Thanks.
Regards,
Steven Cheng
Microsoft Online Support
Get Secure!
www.microsoft.com/security
(This posting is provided "AS IS", with no warranties, and confers no
rights.)
Get Preview at ASP.NET whidbey
http://msdn.microsoft.com/asp.net/whidbey/default.aspx