User must be in two roles to access page (forms authentication)

Hi--

I have a situation where a user must be a member of two roles to access a page or directory.

My initial idea was to set web.config up like this:

<allow roles="ADMINISTRATOR&amp;BEANCOUNTER" />

and write a custom ...