Good overview of [Authorize] attribute in ASP.NET MVC

Jon Galloway - ASP.NET MVC Authentication - Customizing Authentication and Authorization The Right Way

Also, check the related articles, like Looking at how the ASP.NET MVC Authorize interacts with ASP.NET Forms Authorization (link).