I have user roles that link in a custom AuthorizeAttribute above my controller.(I use Asp.net framework)