title: Requiring Multiple Roles in Web.config Authorization
body: <p>Is it possible to specify that multiple roles are required inside the authorization element of the web.config file? I currently have this block in one web.config of my site for a specific directory:</p>
  
  <pre><code>&lt;authorization&gt;  
      &lt;allow roles="Global, Region" /&gt;
      &lt;deny users="*" /&gt;
  &lt;/authorization&gt;
  </code></pre>
  
  <p>I've just identified a special case where a person with two lower-level permissions than Global and Region should also have access to this directory. Roughly, I want something like this:</p>
  
  <pre><code>&lt;authorization&gt;  
      &lt;allow roles="GlobalManager, RegionManager, SiteManager &amp;&amp; FooSite" /&gt;
      &lt;deny users="*" /&gt;
  &lt;/authorization&gt;
  </code></pre>
  
  <p>Any ideas? I realize I probably should have a new role for this scenario, but I'd like to avoid that. Thanks!</p>