title: Best way to do authorization in webforms
body: <p>Every bit of research on this topic is showing how to do this tasks with MVC, my project is MVP webforms based.  I have the authentication done, but is there a pattern or strategy to best do authorization?  </p>
  
  <p>Such as checking for hotlinking on specific pages against a user's role, or hiding ASP controls given a role.  </p>
  
  <p>Currently I'm doing things like: </p>
  
  <pre><code>if(user.Roles.Contains("Admin")){
       lnkAdmin.Visibility = true; 
  }
  </code></pre>
  
  <p>And I don't think that's very clean or maintainable, is there a better way to do these things? </p>