title: ASP.NET Security Roles AND Permissions
body: <p>I'm comfortable with the ASP.NET security model whereby one can allow/deny access to users in the web.config based on what roles they are in e.g. </p>
  
  <pre><code>&lt;system.web&gt;
    &lt;authorization&gt;
      &lt;allow roles = "Admin" /&gt;
    &lt;/authorization&gt;
  &lt;/system.web&gt;
  </code></pre>
  
  <p>However what I want to do is give the admin user a set of permissions which can then be checked e.g. an Admin user with permissions like "can print documents", "can delete document"</p>
  
  <p>Is this sort of thing possible out of the box or would I need to go down a custom route?</p>