<location path="admin.aspx">
  <system.web>
   <authorization>
     <allow roles ="Директора"/> 
     <allow users ="admin"/>
     <deny users ="*"/> 
   </authorization>
  </system.web> 
 </location>
 
 <location path="user.aspx">
  <system.web>
   <authorization>
     <allow roles ="Директора,Менеджеры"/> 
     <deny users ="*"/> 
   </authorization>
  </system.web> 
 </location>

ticket = new FormsAuthenticationTicket( 1 ,txtName.Text, DateTime.Now,DateTime.Now.AddMinutes( 20 ),false,strRoles);
encTicket = FormsAuthentication.Encrypt(ticket);
Response.Cookies.Add(new HttpCookie("UrlAuthz",encTicket));
FormsAuthentication.RedirectFromLoginPage(txtName.Text,false);

<authorization>
 <allow users="*" /> <!-- Allow all users -->
</authorization>

<authentication mode="Forms">
	<forms name="UrlAuth" loginUrl="login.aspx" />
</authentication>

if (Request.Cookies["UrlAuth"] != null )
{
 FormsAuthenticationTicket t =  FormsAuthentication.Decrypt(Request.Cookies ["UrlAuth"].ToString);	
 Response.Write("UserData = "+t.UserData);
}

ticket = new FormsAuthenticationTicket( 1 ,txtName.Text, DateTime.Now,DateTime.Now.AddMinutes( 20 ),false,strRoles);
encTicket = FormsAuthentication.Encrypt(ticket);
Response.Cookies.Add(new HttpCookie("UrlAuthz",encTicket));
FormsAuthentication.RedirectFromLoginPage(txtName.Text,false);

t =  FormsAuthentication.Decrypt(encTicket);			
Response.Write("<br> UserData2= "+t.UserData);