Looking at how the ASP.NET MVC Authorize interacts with ASP.NET Forms Authorization

(Jon Galloway) ASP.NET MVC includes an [Authorize] attribute, which when placed on any controller actions will forbid unauthorized access. The AuthorizeAttribute allows you to specify a list of roles or users, like this:

Read More - Register for Free Membership