Integrating Role Based Authentication (Smart Clients)

[Administrator]

I'm building a new smart client and I'd like to integrate role based authentication such that users login to the system and it restricts their access to features of the application based on admin assigned priveleges. For example, login as "Admin" and get full access to everything. Login as "Gump" and you can only click the File menu items. Login as "Gumby" and you can use Report options, etc.

Any good examples of a DB schema and how to integrate role based security in a windows app, i.e. Smart Client with a SQL Server backend?

Using VB.NET 2005