CruiseControl.NET : Scenario 2

Here is the full configuration for the example. I have omitted the duplicate projects since this scenario is focusing on the security:
<cruisecontrol>
  <internalSecurity>
    <audit>
      <xmlFileAudit location="C:\Logs\CCNet_Audit.xml"/>
    </audit>
    <auditReader type="xmlFileAuditReader" location="C:\Logs\CCNet_Audit.xml"/>
    <users>
      <ldapUser name="lu.jones" domain="localhost"/> <!-- Manager -->
      <ldapUser name="peter.smith" domain="localhost"/> <!-- SysAdmin -->
      <ldapUser name="mark.doulos" domain="localhost"/> <!-- LAS Team leader -->
      <ldapUser name="jill.white" domain="localhost"/> <!-- LAS Senior developer -->
      <ldapUser name="john.asher" domain="localhost"/> <!-- LAS Junior developer -->
      <!-- Remaining users omitted -->
    </users>
    <permissions>
      <rolePermission name="Admin" defaultRight="Allow">
        <users>
          <userName name="lu.jones"/>
          <userName name="peter.smith"/>
        </users>
      </rolePermission>
      <rolePermission name="LAS-Developers" forceBuild="Allow" defaultRight="Deny">
        <users>
          <userName name="john.asher"/>
          <!-- Remaining users omitted -->
        </users>
      </rolePermission>
      <rolePermission name="LAS-Admin" forceBuild="Allow" startProject="Allow" defaultRight="Deny">
        <users>
          <userName name="mark.doulos"/>
          <userName name="jill.white"/>
        </users>
      </rolePermission>
      <!-- Remaining roles omitted -->
    </permissions>
  </internalSecurity>
  <project name="LAS-Main">
    <workingDirectory>C:\Build\LAS-Main</workingDirectory>
    <artifactDirectory>C:\Build\LAS-Main\Deploy</artifactDirectory>
    <webURL>http://localhost/server/local/project/LAS-Main/ViewProjectReport.aspx</webURL>
    <!-- Source control block defined here -->
    <triggers>
      <intervalTrigger buildCondition="IfModificationExists" seconds="300" />
    </triggers>
    <tasks>
      <!-- Tasks defined here -->
    </tasks>
    <publishers>
      <!-- Publishers defined here -->
    </publishers>
    <security type="defaultProjectSecurity" defaultRight="Deny">
      <permissions>
        <rolePermission name="LAS-Developers" ref="LAS-Developers"/>
        <rolePermission name="LAS-Admin" ref="LAS-Admin"/>
        <rolePermission name="Admin" ref="Admin"/>
      </permissions>
    </security>
  </project>
  <!-- Other projects defined here -->
</cruisecontrol>
Full Example
