Authentication and Authorisation

Question

Hello, I have a web.config file in that authentication and authorization section i have defined roles and users, i would like to know from where web.config file get these values and perform comparison.

<authentication mode="Forms">

<forms loginUrl="Login.aspx">

</forms>

</authentication>

<location path="HRpages">

<system.web>

<authorization>

<allow roles="HR","Admin" />

<allow users="john”, “smith”, “Ahmed” />

<deny users="*" />

</authorization>

</system.web>

</location>