如何使用activedirectorymembershipprovider在asp.net mvc应用程序中实现角色层次结构

 <system.web>
    <membership defaultProvider="ADMembershipProvider">
      <providers>
        <add name="ADMembershipProvider" 
             type="System.Web.Security.ActiveDirectoryMembershipProvider, System.Web, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" 
             connectionString="LDAP://yourdomaincontroller:389/ou=YourOU,dc=YourDomain,dc=com" 
             connectionUsername="YourDomain\YourUsername" 
             connectionPassword="YourPassword" 
             attributeMapUsername="sAMAccountName" 
             attributeMapEmail="mail" 
             enableSearchMethods="true" 
             passwordFormat="Encrypted" />
      </providers>
    </membership>
    <roleManager enabled="true" defaultProvider="AspNetWindowsTokenRoleProvider">
      <providers>
        <add name="AspNetWindowsTokenRoleProvider" type="System.Web.Security.WindowsTokenRoleProvider, System.Web, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" />
      </providers>
    </roleManager>
  </system.web>
</configuration>

string[] roles = Roles.GetRolesForUser();

[Authorize(Roles="Administrator")]
public ActionResult Edit()
{
    return View();
}

if (User.IsInRole("Administrator"))
{
    // Do something
}