I\'m using Forms authentication and I would like to make use of roles, can I somehow set the role of the user without Membership ?
You don't need to implement a whole membership provider.
Create your own Principal (which has the IsInRole method) and Identity.
And then make sure your user object (HttpApplication.Context.User) is populated with your principal on each request.
Done. Now the Authorize attribute will be talking to your principal.