title: ASP.NET Custom Role Provider - Additional Fields
body: <p>I am faced with a security model problem when migrating my code to ASP.NET.</p>
  
  <p>In the application:</p>
  
  <ol>
  <li><p>There are multiple roles. (Role A, Role B etc)</p></li>
  <li><p>There are multiple input/output fields. (Field A, Field B etc)</p></li>
  <li><p>There are multiple permission levels controlling access to each field. (Read, Direct Edit, Edit With Approval, None)</p></li>
  <li><p>Each role has its own permissions to fields. (Role A has Read Permission to Field A; Role B has Direct Edit permission to Field A etc)</p></li>
  <li><p>Every role can be assigned to users and they are assigned by Geographic information. (User A is assigned to Role A for Continent: Europe - Country: Germany;  User B is assigned to Role A for Continent: Europe - Country: France; User A is assigned to Role B for Continent: Europe - Country: France etc)   </p></li>
  <li><p>Users can have multiple roles </p></li>
  <li><p>User identity is coming from Windows Authentication.</p></li>
  </ol>
  
  <p>So my question/problem is: is it possible to represent this type of kind of multi-layered security model using ASP.NET internal membership/role providers?</p>
  
  <p>If so, what should my starting point be? Creating only custom role provider with custom methods and fields be enough?</p>