Page Authorization Best Practice

Hello,

 I have two roles at my web app, and would like to limit the access of people from different roles to view the

logged in pages of other roles.

For this, I have created two base classes for the two roles and the relevant pages all inherit from these classes.

The base classes, at page load check for the users role, and log the user out if the user is of a non relevant role and direct the user to the

login page of the relevant role.

Do you think using  a base class for these practices is a good idea?

Also, is there still a need to use the authorization section in the web config to set access rules for certain folders/pages?

Thank you.
...