I am writing a webforms app, and I need to restrict access to one folder to a series of roles.
The base web.config file for my app looks like this: