有关Windows窗体应用程序的身份验证和授权的任何框架？

I'm a C# developer. I develop both Windows & Web Applications. I would like to build an Winforms application that has a role-based system. All users must in role/group(s). Then we assign permissions like "View, Add, Update,.." to role/group. The role/group is dynamic, so we let users to define it.I'm a C# developer. I develop both Windows & We