Role based security

[MBursill]

I'm playing around with the MMC Authorization Manager attempting to setup some role based security for a new project. The software I'm developing is for a smaller sized businesses. We're the type of place where one day the operations manager is filling the shoes of the accountant because the accountant called in sick, or is on vacation. As a result, my system needs to be flexible when it comes to authorization. I can foresee situations where I may want to allow tasks for a user without necessarily making them part of a role (that would expose everything). Sure I could make additional roles that add only the tasks a specific user may need. If I end up with a lot of specialized cases (which I might) that gets ugly to manage. I really don't want the system to become a nightmare of single-case roles each with one or two users. Has anyone encountered this type of scenario and what was done about it? Also, before the flames start, I realize my question isn't directly related to C# but since there is no security group (And my app is going to be written in C#) this seems the least off topic place to post. Thanks :) -Mike.