How do you achieve field level security in ASP.Net?
I have an .aspx form with 20 fields that must be disable based on a users role and a status of a order record.  Currently the application has 5 roles and 3 status, so I have 300 different possible conditions that I have to account for. 

My first thought is to store each permutation in a table, then set the fields when the page loads by looping through the fields.  Is there a better way?  Please note, I am using  .Net 2.0 and NOT MVC.
How do you achieve field level security in ASP.Net?
===

I have an .aspx form with 20 fields that must be disable based on a users role and a status of a order record.  Currently the application has 5 roles and 3 status, so I have 300 different possible conditions that I have to account for. 

My first thought is to store each permutation in a table, then set the fields when the page loads by looping through the fields.  Is there a better way?  Please note, I am using  .Net 2.0 and NOT MVC.