What is Authorization in ASP.NET?

Authorization, in simple words means "which user can access which resource on a web server". Authentication of users may be set in the web.config file. See web.config snippet below...

<authorization>
   <deny users="?" /> <!-- Allow all users -->
     <!-- <allow users="[user list separated by commas]"
     roles="[role list separated by commas]"/>
     <deny users="[user list separated by commas]"
     roles="[role list separated by commas]"/>
   -->
</authorization>

Based on the user and the role, access to different folders across the website may be controlled using the authorization feature of ASP.NET