关于权限验证的两篇好文

http://www.codeproject.com/Articles/98950/ASP-NET-authentication-and-authorization

 

http://msdn.microsoft.com/en-us/library/ff647070.aspx