<location path="admin.aspx">
  <system.web>
   <authorization>
     <allow roles ="Директора"/> 
     <allow users ="admin"/>
     <deny users ="*"/> 
   </authorization>
  </system.web> 
 </location>
 
 <location path="user.aspx">
  <system.web>
   <authorization>
     <allow roles ="Директора,Менеджеры"/> 
     <deny users ="*"/> 
   </authorization>
  </system.web> 
 </location>

ticket = new FormsAuthenticationTicket( 1 ,txtName.Text, DateTime.Now,DateTime.Now.AddMinutes( 20 ),false,strRoles);
encTicket = FormsAuthentication.Encrypt(ticket);
Response.Cookies.Add(new HttpCookie("UrlAuthz",encTicket));
FormsAuthentication.RedirectFromLoginPage(txtName.Text,false);

<authorization>
 <allow users="*" /> <!-- Allow all users -->
</authorization>

<authentication mode="Forms">
	<forms name="UrlAuth" loginUrl="login.aspx" />
</authentication>

if (Request.Cookies["UrlAuth"] != null )
{
 FormsAuthenticationTicket t =  FormsAuthentication.Decrypt(Request.Cookies ["UrlAuth"].ToString);	
 Response.Write("UserData = "+t.UserData);
}

ticket = new FormsAuthenticationTicket( 1 ,txtName.Text, DateTime.Now,DateTime.Now.AddMinutes( 20 ),false,strRoles);
encTicket = FormsAuthentication.Encrypt(ticket);
Response.Cookies.Add(new HttpCookie("UrlAuthz",encTicket));
FormsAuthentication.RedirectFromLoginPage(txtName.Text,false);

t =  FormsAuthentication.Decrypt(encTicket);			
Response.Write("<br> UserData2= "+t.UserData);

protected void Application_AuthenticateRequest(Object sender, EventArgs e)
{
   if (Request.IsAuthenticated) 
   {
      Response.Write("hidook<br>");
      if ((Request.Cookies["UrlAuth"] == null) || (Request.Cookies["UrlAuth"].Value   = ""))
      {
					
      }
      else
      {
         FormsAuthenticationTicket ticket = FormsAuthentication.Decrypt       (Context.Request.Cookies["UrlAuth"].Value);
        Response.Write("global.asa<br>");
        Response.Write("UserData="+ticket.UserData);
}
 }
}