Here is a good article show how to implement forms authentication and role based security using a database.

http://www.eggheadcafe.com/articles/20020906.asp