Role defined access and dynamic role definition
===

I'm implementing a role defined access system in my web-app defining authorizations in `web.config` file, something like:

	<location path="myPage.aspx">
		<system.web>
		  <authorization>
			<deny roles="GEP_OPERATORE" />
		  </authorization>
		</system.web>
	</location>

And in `myPage.aspx` I used a lot of `if`s to define section visibility for each role.

My role structure is static, so I should not have particular problems with this implementation, but what if my roles were dynamically definied and someone can add or remove roles anytime?

Is my implementation incorrect? I'm new to this problem so I'd like to know if there is a common way to solve it?