I'm jumping into SharePoint 2010 (first SP version for me) and I'm building some application pages. I'm trying to secure the pages by dropping a web.config in the dir with role authorization. Is this the proper way? What's the standard way to secure application pages?
Thanks.