title: Data level Authorization filter in ASP.Net MVC
body: <p>We have Role based Authorization implemented in our mvc application </p>
  
  <pre><code>[Authorize(Roles = "ProjectEngineer")]
  </code></pre>
  
  <p>Our need is now to extend this to data level in such way that Project Engineer from department X can only view data from his department and so on.
  Need a mapping between security group and what departments it can view data from.
  I am looking for the best way to implement this.</p>