I wondered if/how I can override the default [Authorize] behavior in ASP.NET MVC. I know that I can create a new Action Filter, make my own attribute and so forth; I am mere
Implement your own Role Provider and set your app to use it. Then the Authorize attribute will respect your athorization code.