How can I restrict access for a single Web service to authorized users roles?

• 我怎样才能把对单个Web服务的访问限制到经过授权的用户角色?