title: asp.net user permissions
body: <p>I am quite confused about this and none of the texts / docs / SO questions have elucidated the matter for me.</p>
  
  <p>I want my asp.net MVC app to be able to save an XML doc to a folder on the server. But I am getting an exception...</p>
  
  <pre><code>Access to the path 'D:\blah\blah\folder\xml_data.xml' is denied.
  </code></pre>
  
  <p>So as I understand it my application is running under a user account that does not have write permissions.</p>
  
  <p>I think I had this problem before and my solution was to contact my web host and ask them to give my site permissions.</p>
  
  <p>But what if I want to create my own custom set of roles with corressponding permissions? Do these have to be added into IIS? Would I have to create a list and then hand it over the the web host? What would such a list look like? As I understand it, it is not possible to configure roles and permissions in web.config, is that correct?</p>
  
  <p>Once I have the roles and their permissions set up how to I set the default role for the app to run under and also how do I programitically change the role that the app is running under?</p>
  
  <p>ps. I don't want to use asp.net membership I would like to know how to set this up myself.</p>