<?xml version="1.0" encoding="utf-8"?>
<configuration>
    <system.web>
        <authorization>
            <allow roles="administrators"/>
           <!-- <allow users="admin" /> -->
            <deny users="*" />
        </authorization>
    </system.web>
</configuration>