关于权限验证的两篇好文 http://www.codeproject.com/Articles/98950/ASP-NET-authentication-and-authorization http://msdn.microsoft.com/en-us/library/ff647070.aspx