Where can I store User Permissions for my website?
<p>Hai,
 i am trying to store the user permissions for my web site.But I am little bit confused with xml and Database. For each user in site have different permissions. Have u ever faced this issue? for Example , if my site is  a shopping site , for a local user , the report menu need not to display. A sales man need not to display the purchase page. and so on ..</p>

<p>I think you understood my problem .I have done this user management using a xml file . For each user a new node will create according to the menu and keep in the xml file . Next time the user login ,checks the permissions and and show only the allowed menus. </p>

<p>My boss tell me to do the same thing using the Database. by using XmlDataSource it is quite simple to bind data to the treeview (for setting permission) and binding to the menustrip also. 
He is pointing the security problem . i don't think like so. </p>

<p>Which is better ? DB or XML  </p>
