title: Can an action authorize everyone except a given user/role?
body: <p>Setting an action to be allowed by only a specific user or role is easy using the [Authorize] attribute. E.g.
  </p>
  
  <pre><code>[Authorize(Roles = "Administrator")]
  public ActionResult Index()
  {
    ...
  </code></pre>
  
  <p>However, I ran into a problem when I wanted the inverse. Is there a way using MVC framework features to allow all authenticated users <em>except</em> those specified by name or role?</p>
  
  <p>The desired usage would be something akin to:
  </p>
  
  <pre><code>[DoNotAuthorize(Roles = "RestrictedUser")]
  public ActionResult Index()
  {
    ...
  </code></pre>