Roll-base access control with Forms authentication?

[TK]

What's the best way to implement roll-base access control with forms
authentication?

I have a IIS6+ASP.NET server which hosts some ASP.NET web applications as
separated path that's like "/app1/default.aspx", "/app2/default.aspx", ....
and a single logon page as "/logon/logon.aspx" for forms authentication.
I've already implemented "single sign-on" structure for those web
applications and it's working fine. No one who didn't logged on through the
logon.aspx page can access to any web applications.

Now I want to have roll base access controll for those web applications.
It's something like to allow/deny access to the "/app1" application for whom
is a member of "managers" user group.

I'm looking for a simplest way to do this.
Can anybody help me please?

TK

 

[Steve C. Orr [MVP, MCSD]]

I successfully developed an app using role-based forms authentication
by using the techniques outlined in these articles:
http://support.microsoft.com/default.aspx?scid=kb;en-us;311495
http://www.4guysfromrolla.com/webtech/121901-1.2.shtml

Here is another article you may find useful as well:
http://www.eggheadcafe.com/articles/20020906.asp