The seagile man
The object guy has an extension on the intrinsic role based security of .NET. You can find it here.