I've read the Darren Neimke article from 4guysfromrolla and began playing with Role-Based security. However, I'm developing in C# and am new to that language. As C# doesn't use dynamic arrays I'm using an ArrayList as my array of roles. However, I can't seem to properly parse out the array of roles at the creation of the GenericPrincipal. The VB example does this:<BR><BR>roleStr = CType(userRoles.ToArray(GetType(String)), String())<BR><BR>I can't seem to cast my ArrayList into an array of strings. Any guidance (in C#) would be helpful.<BR><BR>Thanks,<BR>DS