Ok - I've pretty much had it with working with the default membership provider AND customizing it - so I'm just going to do this crap manually.
****this example is purely hypothetical, but demonstrates what I want to do****
I have a convoluted security scheme that involves user created roles and permissions on data objects/things (think - role: teacher; permissions: view students, edit students, view SSN; data object: math101). Everything must be managed by role, because many permissions aren't "data objects" (again - think "math101") but rather, whether someone should see something a certain way - view ssn. It is highly likely that business rules will change and an admin may say "well, teachers don't need to view SSN", I want to take View SSN away from all teachers... to do this I need a role to contain these.
Now, the data object permissions are a ...
Go to the complete details ...