Vista - Role based authorization

Hi!

I am looking for the 'state-of-the-art' way to implement a role based
authorization (Windows security) mechanism. First, I started with the
'PrincipalPermission' attribute, but I read in the SDK documentation that
this should be done only for legacy systems. Further more if I use the
attribute I cannot define the permitted roles for each service operation in a
config file.
I read about a claims based authorization model, but I cannot find any
documentation about that.
Is there a documentation available?

Greetings from the cold Germany!

Bye, Sebastian