title: How to handle role authorization for users having multiple roles in ASP.NET MVC?
body: <p>I am trying to find the best way to structure my security roles in ASP.NET MVC.</p>
  
  <p>Basically the Roles are static (Administrator, Client, Technician) but what they can do in each section is configurable, Add/Edit/Delete/View. </p>
  
  <p>For example you are able to configure a Client's security to specific areas like User Accounts.</p>
  
  <p>A user can be a combination of any roles, so it is possible to be a Client and a Technician and have the combined privlages of both users.</p>
  
  <p>What would be a suitable way to go about doing this in ASP.NET MVC?</p>