title: Configure authorized roles dynamically via a config file in MVC Application
body: <p>I current have the following attribute decorating one of the action method.</p>
  
  <pre><code>[Authorize(Roles = "Admin")]
  public ActionResult DoAdminTask()
  {
  //Do something
  
     return View();
  }
  </code></pre>
  
  <p>Currently, only users in the Admin role can invoke this method, but this will change. Is there anyway I can store a list of authorised roles in a config file, rather than hard coding it into the source?</p>
  
  <p>EDIT: Roles will change over time, and more than 1 role will need access. 
  i.e. Users in either role A <strong>OR</strong> role B can access.</p>