You can create a custom attribute which derives from FilterAttribute and implements IAuthorizationFilter.
You should also be able to get the user information in the OnAuthorization method by accessing filterContext.HttpContext.User.Identity without the need to pass the userid.