Hi , i'm developing a permission-based win application there is one Permission for each possible Action in db & each Role has some Permissions and a custom authentication system is implemented for identifying users and their roles now, 1.i want to know what's advantages of using .Net Role-Based Security ? i mean for controlling access of user to resources i could simply use something like this : ** if (currentuser.HasPermission("RequiredPermission")) then do the action ** 2.i would check user permission in Business layer but i want all of my biz methods contains a piece of code for controlling the access is there any way to force all methods to have this piece of code or at least a special code Attribute ? Thanks in advance