ASP navigation trimming

[livid86]

Hey,

I am trying to setup my application so only users with particular roles can see navigation items that match there role. (such as admin can see the admin navigation items)

Well my problem is it's not working and i have checked several sites and found nothing. If anyone could help i would really appreciate it.

This is my code for my Web.Sitemap

<?xml version="1.0" encoding="utf-8" ?>
<siteMap xmlns="http://schemas.microsoft.com/AspNet/SiteMap-File-1.0" >
 
    <siteMapNode url="" title="Admin"  description="" SecurityTrimmingEnabled="true">
 
      <siteMapNode url="~/Admin/Default.aspx" title="Admin" description="Admin" roles="*"/>
      <siteMapNode url="~/Admin/Document.aspx" title="Document"  description="" roles="Level 1 User" />
      <siteMapNode url="~/Admin/DocumentGroup.aspx" title="Document Group"  description="" roles="Level 1 User" />
      <siteMapNode url="~/Admin/DocumentGroupDocument.aspx" title="Document Group Document"  description="" roles="Level 1 User"/>
      <siteMapNode url="~/Admin/DocumentGroupUser.aspx" title="Document Group User"  description=""/>
      <siteMapNode url="~/Admin/DocumentRevision.aspx" title="Document Revision"  description=""/>
      <siteMapNode url="~/Admin/DocumentSource.aspx" title="Document Source"  description=""/>
      <siteMapNode url="~/Admin/DocumentViewHistory.aspx" title="Document View History"  description=""/>
      <siteMapNode url="~/Admin/Request.aspx" title="Request"  description=""/>
      <siteMapNode url="~/Admin/RequestStatus.aspx" title="Request Status"  description=""/>
      <siteMapNode url="~/Admin/User.aspx" title="User"  description="" />
      <siteMapNode url="~/Admin/UserLevel.aspx" title="User Level"  description=""/>
      <siteMapNode url="~/Admin/Watermark.aspx" title="Watermark"  description=""/>
      <siteMapNode url="DocumentList.aspx" title="Document List"  description=""/>
 
  </siteMapNode>
</siteMap>

Web.Config

<?xml version="1.0"?>
<configuration>
 
 
  <configSections>
 
 
    <section name="DMS.Data" type="DMS.Data.Bases.NetTiersServiceSection, DMS.Data" allowDefinition="MachineToApplication" restartOnExternalChanges="true" />
        <section name="enterpriseLibrary.ConfigurationSource" type="Microsoft.Practices.EnterpriseLibrary.Common.Configuration.ConfigurationSourceSection, Microsoft.Practices.EnterpriseLibrary.Common, Version=4.1.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35" />
    </configSections>
    <appSettings/>
    <connectionStrings>
 
        <add name="DMS.Data.ConnectionString" connectionString="Data Source=CORY-LAPTOP\DB1;Initial Catalog=DMS;Integrated Security=true" />
    <add name="ASPNETDB" connectionString="Data Source=CORY-LAPTOP\DB1;Integrated Security=SSPI;Database=DMS"/>
  </connectionStrings>
    <DMS.Data defaultProvider="SqlNetTiersProvider">
        <providers>
            <!--
                *** SqlClient Provider ***
                    connectionStringName: sqlclient connection string to the db
                    useStoredProcedure: if true, indicates that we use the stored procedures, otherwise, we use parametrized queries that are embedded.
            -->
 
      <add 
              name="SqlNetTiersProvider" 
              type="DMS.Data.SqlClient.SqlNetTiersProvider, DMS.Data.SqlClient"
              connectionStringName="DMS.Data.ConnectionString"
              providerInvariantName="System.Data.SqlClient"
              entityFactoryType="DMS.Entities.EntityFactory"
              useEntityFactory="true"
              enableEntityTracking="true"
              enableMethodAuthorization="false"
              useStoredProcedure="false"
              defaultCommandTimeout="30"
            />
            <!-- 
                *** WebserviceClient Provider ***
                The url parameter indicates the webservices url (ex: http://localhost/DMS/DMSServices.aspx)
                <add 
                    name="WsNetTiersProvider" 
                    type="DMS.Data.WebServiceClient.WsNetTiersProvider, DMS.Data.WebServiceClient"
                    url="/DMSServices.asmx" />
            -->
        </providers>
    </DMS.Data>
    <system.web>
    <siteMap defaultProvider="XmlSiteMapProvider" enabled="true">
      <providers>
        <add name="XmlSiteMapProvider"
          description="Default SiteMap provider."
          type="System.Web.XmlSiteMapProvider"
          siteMapFile="Web.SiteMap"
          securityTrimmingEnabled="true" />
      </providers>
    </siteMap>
 
    <pages theme="default">
            <controls>
                <add tagPrefix="data" namespace="DMS.Web.Data" assembly="DMS.Web"/>
                <add tagPrefix="data" namespace="DMS.Web.UI" assembly="DMS.Web"/>
            </controls>
        </pages>
        <httpModules>
            <add name="EntityTransactionModule" type="DMS.Web.Data.EntityTransactionModule, DMS.Web"/>
        </httpModules>
        <compilation debug="true" />
    <authentication mode="Forms">
      <forms    name=".ASPXAUTH"
              loginUrl="Login.aspx"
              protection="All"
              timeout="30"
              path="/"
              requireSSL="false"
              slidingExpiration="true"
              defaultUrl="Login.aspx"
              cookieless="UseDeviceProfile"
              enableCrossAppRedirects="false"/>
 
      </authentication>
    <authorization>
 
      <allow roles="Level 1 User"/>
      <allow roles="Level 2 User"/>
      <allow roles="Level 3 User"/>
      <allow roles="Administrator"/>
      <deny users="*"/>
 
    </authorization>
    <membership defaultProvider="DmsMembershipSqlProvider" userIsOnlineTimeWindow="15">
      <providers>
        <add
            name="DmsMembershipSqlProvider"
            type="System.Web.Security.SqlMembershipProvider, System.Web, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a"
            connectionStringName="ASPNETDB"
            enablePasswordRetrieval="false"
            enablePasswordReset="true"
            requiresQuestionAndAnswer="true"
            applicationName="DMS"
            requiresUniqueEmail="true"
            passwordFormat="Hashed"/>
      </providers>
    </membership>
 
    <roleManager
                enabled="true"
                cacheRolesInCookie="true"
                defaultProvider="DmsRoleManagerSqlProvider"
                cookieName=".ASPXROLES"
                cookiePath="/"
                cookieTimeout="30"
                cookieRequireSSL="false"
                cookieSlidingExpiration="true"
                createPersistentCookie="false"
                cookieProtection="All">
      <providers>
        <add name="DmsRoleManagerSqlProvider"
            type="System.Web.Security.SqlRoleProvider, System.Web, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a"
            connectionStringName="ASPNETDB"
            applicationName="DMS"/>
      </providers>
    </roleManager>
  </system.web>
    <enterpriseLibrary.ConfigurationSource selectedSource="File Configuration Source">
      <sources>
        <add name="File Configuration Source" type="Microsoft.Practices.EnterpriseLibrary.Common.Configuration.FileConfigurationSource, Microsoft.Practices.EnterpriseLibrary.Common, Version=4.1.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35"
            filePath="entlib.config" />
      </sources>
    </enterpriseLibrary.ConfigurationSource>
 
 
</configuration>

At the moment this brings up nothing even if you are logged in as a user under level 1 user. If i remove the part in Web.Config that's in bold all users can see all menus.

Also if i try to access an admin page with a basic user it prompts me to login, (not really sure if that helps)

Thanks heaps

[livid86]

I feel like an idiot LOL!, after hours and hours of thinking i finnally figured out the parrent needs the role set!!

Thanks anyhow