title: User authentication and authorisation in ASP.NET MVC
body: <p>What is the best method for user authorisation/authentication in ASP.NET MVC?</p>
  
  <p>I see there are really two approaches: </p>
  
  <ul>
  <li>Use the built-in ASP.NET authorisation system.</li>
  <li>Use a custom system with my own User, Permission, UserGroup tables etc.</li>
  </ul>
  
  <p>I'd prefer the second option, because User is part of my domain model (and I have <strong>zero</strong> experience with ASP.NET's built-in stuff), but I'd really like to hear what people have been doing in this area.</p>