Authorization in ASP.NET for accessing a set of subdirectories depending on login
<p>Scenario: A web application consists of a root directory (open, no authorization) and a number of subdirectories (let's call them Sub1, Sub2 and Sub3). Furthermore, when an user name is provided, there's a method contacting a SP and returning an <code>IEnumerable&lt;String&gt;</code> consisting of the names of subdirectories, which that certain user is supposed to be allowed to access. The above is not changeable.</p>

<p>I wonder what the <strong>neatest</strong> way to solve this would be. I can't rely on AD and a simple authorization stored in a cookie or a session variable won't allow for a diversification of accessible subdirectories.</p>

<p><em>I'm pretty confident I can make it work but I'd like to do it in bragable style.</em></p>

<p>Suggestions? </p>
