I have to write a web service that can be called through WWW(using asp.net 3.5) but i need to restrict users from calling the service methods from preferably using built in aspnet security principle objects.how to restrict users from calling web service based on their role in asp.net webservices?