I am having an application, now we are adding roles/user/permissions to access... I know we could just put these data into an xml file and then read. we do not want to save into database. . Other then xml file, what are the best ways to handle this kind of thing?