title: How to use custom Authorize attribute for roles as well as a specific user?
body: <p>I have my Action Method</p>
  <pre><code>[Authorize(Roles=&quot;Admin&quot;)]
  public ActionResult EditPosts(int id)
  {
      return View();
  }
  </code></pre>
  <p>In my case I need to authorize administrators so they can edit posts but (here comes the cool part), I also need to allow the creator of the post to be able to edit the post which is a normal user. So how can I filter out the user that created the post as well as the admins but leave the others unauthorized? I am receiving the PostEntry id as a route parameter but that's after the attribute and also attributes only accept constant parameters, looks like something very difficult, your answers are highly appreciated, Cheers!</p>