I am debating on whether or not to write my own authentication class. It's almost done but I think it could be better to use a role provider (either custom or the default.) I know you can assign users to roles, and then display info to the user based upon the current role. But what if you want to assign permission based upon a task? For example, say sometimes I want a role of editor to be able to modify other peoples posts, but other times I don't. That is a simple situation but I would like to have a finer grained level of authorization, instead of having a ton of roles (editor, editor-all-posts, etc.) Is this possible using a custom asp.net role provider, or should I just continue finishing my own system?I am debating on whether or not to write my own