Q:

Where does SqlMembershipProvider store access roles?

I have membership provider database includes a set of aspnet_Membership tables.
I'm trying to add some access rule to the application.
(1) In web.config e.g. 
<location path='..'>...<allow roles='admin'>..</location>

(2) or through the Web Site Administration Tool >> Manage Access rules?
Both of them can work.
Where are the rules created in (2) stored ? I cannot find them in the database. 
I suppose (1) and (2) are setting rules in different level.
Which way should I use, regarding security and functionality.
Thx

A:

Both 1 and 2 methods are stored in same Web.config. You need to click Show All Files.

