title: Restricting Access to pages via Identity 2.0 and web forms MVC
body: <p>I am trying to restrict certain pages to only certain Roles within my ASP.NET WebForms MVC. I have tried implementing some of the Web.config solutions I've seen about Identity 2.0, but I am having no luck at all. </p>
  
  <p>I've moved some of the User / Roles management stuff to the controller-side, and I have 3 Roles for admin function - <code>SuperUsers</code>, <code>InstituteAdmins</code>, and <code>AccountAdmins</code>. I can add users to roles, and I can see the roles and users in SQL Studio, but I really am stuck as to where to implement the restricted access. I have tried this in the web.config file:</p>
  
  <pre><code>&lt;!--roles--&gt;
      &lt;!-- Allow all "SuperUsers" role users to access ManageCategory.aspx --&gt;    
       &lt;location path="ManageCategory.aspx"&gt;    
            &lt;system.web&gt;    
                 &lt;authorization&gt;    
                      &lt;allow roles="SuperUsers" /&gt;
                      &lt;deny users="*"/&gt; 
                 &lt;/authorization&gt;    
            &lt;/system.web&gt;   
       &lt;/location&gt; 
  </code></pre>
  
  <p>But this doesn't do anything.</p>