Authorizing Users and Roles ASP.NET is used to control client
access to URL resources. It is configurable for the HTTP method
used to make the request (GET or POST) and can be configured to
allow or deny access to groups of users or roles. The following
example shows access being granted to a user named someone and a
role named Admins. All other users are denied access. <allow
users="email@example.com" /> <allow roles="Admins" /> <deny
users="*" /> Permissible elements for authorization directives
are either allow or deny. Each allow or deny element must
contain a users or a roles attribute. Multiple users or roles
can be specified in a single element by providing a comma-
separated list. <allow users="John,Mary" /> The HTTP method can
be indicated using the Verb attribute: <allow VERB="POST"
users="John,Mary" /> <deny VERB="POST" users="*" /> <allow
VERB="GET" users="*" /> This example lets Mary and John POST to
the protected resources, while only allowing everyone else to
use GET. There are two special usern