Form Authentication

I want to ask, does the Form authentication by create a user roles. the user roles must be work with the database???
if just using hard code, when user login, i only assign the roles to it, is it possible???
I have create a access rule for the particular folder, but it still can assess to the folder. I does not store the user role into the database
...