An old long article from MSDN talked about asp.net security model. I reread it quickly due to current existing project need feeling it was worth reading for each asp.net programmer if you want to deeply understand the security infrastructrue of asp.net.

Although it is an introductory material, I 'd recommand this article

and this one