<?xml version="1.0"?><configuration>    <system.web>        <authorization>            <allow roles="Admin"/>            <deny users="*"/>        </authorization>    </system.web></configuration>

  <authentication mode="Forms">            <forms loginUrl="Admin/Login.aspx" timeout="20" path="/" protection="All" />        </authentication>

    <location path="Admin/Register.aspx">        <system.web>            <authorization>                <allow users="*"/>            </authorization>        </system.web>    </location>

   public class BasePage:Page    {public LoginInfo LoginUser        {get            {//从票据中返回UserData，并反序列化为对象                string strUser = ((FormsIdentity)this.Context.User.Identity).Ticket.UserData;return Serialize.DnSerializeFun(strUser);            }        }    }

  [Serializable]public class LoginInfo    {public int id { get; set; }public string Name { get; set; }public DateTime LoginTime { get; set; }public string Roles { get; set; }    }

      //对象序列化为字符串        public string SerializeFun(LoginInfo Li)        {            BinaryFormatter bf = new BinaryFormatter();            MemoryStream ms = new MemoryStream();            bf.Serialize(ms, Li);byte[] objbyte = ms.ToArray();return Convert.ToBase64String(objbyte, 0, objbyte.Length);        }//字符串序列化为对象        public  static LoginInfo DnSerializeFun(string SerializeStr)        {byte[] byt = Convert.FromBase64String(SerializeStr);            BinaryFormatter bf = new BinaryFormatter();            MemoryStream ms = new MemoryStream(byt, 0, byt.Length);return bf.Deserialize(ms) as LoginInfo;                   }

        protected void Application_AuthenticateRequest(Object sender, EventArgs e)        {if (this.Context.User != null)            {if (this.Context.User.Identity.IsAuthenticated)                {if (this.Context.User.Identity is FormsIdentity)                    {string strUser = ((FormsIdentity)this.Context.User.Identity).Ticket.UserData;

string[] roles = DataClass.Serialize.DnSerializeFun(strUser).Roles.Split(',');

this.Context.User = new GenericPrincipal(this.Context.User.Identity, roles);                    }                }            }        }

   //自动设置Ticket        private void AutoLogin()        {            FormsAuthentication.SetAuthCookie(TextBox1.Text, false);            Response.Redirect("Main.aspx"); 

        }//手动设置Ticket        private void TicketLogin()        {            LoginInfo dl = new LoginInfo();            Serialize sr = new Serialize();

if (TextBox1.Text == "123" && TextBox2.Text == "123")            {//LoginInfo赋值                dl.id = 1;                dl.Name = TextBox1.Text;                dl.LoginTime = DateTime.Now;

//判断什么Roles,用,分开                dl.Roles = "User,Admin";//序列化LoginInfo                string SeStr = sr.SerializeFun(dl);

//定义ticket                FormsAuthenticationTicket ft = new FormsAuthenticationTicket(1, "Admin", DateTime.Now, DateTime.Now.AddMinutes(20), false, SeStr);

//加密ticket                string strTicket = FormsAuthentication.Encrypt(ft);

//使用userdata保存cookie                HttpCookie cookie = new HttpCookie(FormsAuthentication.FormsCookieName, strTicket);                cookie.Expires = ft.Expiration;                Response.Cookies.Add(cookie);                Response.Redirect("../AdminFolder/AdminPage.aspx");            }else            {                Response.Write("密码错误");            }        }

   public partial class UserPage : DataClass.BasePage    {protected void Page_Load(object sender, EventArgs e)        {            Response.Write(LoginUser.Roles);        }    }