[Authorize (Roles="group1")]
will not allow group1.
also, if I do Roles.IsUserInRole("group1"), its false despite the users role correctly identified in asp.net membership db.
what could i be missing?
EDIT: if I do this I can read the role, but not as above: Roles.Provider.GetRolesForUser("username")