Serious help needed with beta 2.0 SiteMapProvider ..

[RCS]

All,

OK, so I'm working on a template for our new ASP.NET applications. Part of
this, includes using the new menu and breadcrumbs control in ASP.NET 2.0
(I'm using beta 2).

I put the hierarchy of the applications and navigation in a database, and am
able to pull that into the app by inheriting StaticSiteMapPr ovider. So
that's set and works great.

So then I realize that it builds the sitemap at the application level, not
at the user level. So I've been looking into how to restrict the menu
items - based on security I will get from the database.

In my inherited class, I override IsAccessibleToU ser - and that seems to
work for the breadcrumbs (because it doesn't show anything if I go to an
"invalid" page) - but it doesn't do anything to the menu (or the treeview
either, for that matter). I basically check a couple hard-coded "roles" to
the "roles" that are associated with the current node.

From what I've been piecing together, it looks like the menu will only trim
away the unwanted menu items if the provider has the
securityTrimmin gEnabled="true" - but when I try to add that to the
<providers> section in web.config - I get a red-squiggly and a compiler
warning that it's invalid (where it used to be valid in old versions).

BOTTOM LINE:
I need to prune the menu hierarchy based on user permissions. One user may
only see literally one item and another user may see a few dozen - or at
least that's what I need to replicate.

How can I have the menu control (or the treeview) prune away the things that
the current user isn't supposed to see??

[RedEye]

Have you tried to using the roles attribute in the site map file?

<siteMap>
<siteMapNode title="Home" description="" url="default.as px">
<siteMapNode title="Announce ments" url="Announceme nts.aspx"
description="In formation for all employees" roles="*" />
<siteMapNode title="Salaries " url="Salaries.a spx"
description="Sa lary data" roles="Managers ,CEOs" />
<siteMapNode>
</siteMap>

I hope this helps
RedEye

"RCS" <rs****@gmail.c om> wrote in message
news:FQ******** *********@newss vr33.news.prodi gy.com...

All,

OK, so I'm working on a template for our new ASP.NET applications. Part of
this, includes using the new menu and breadcrumbs control in ASP.NET 2.0
(I'm using beta 2).

I put the hierarchy of the applications and navigation in a database, and
am able to pull that into the app by inheriting StaticSiteMapPr ovider. So
that's set and works great.

So then I realize that it builds the sitemap at the application level, not
at the user level. So I've been looking into how to restrict the menu
items - based on security I will get from the database.

In my inherited class, I override IsAccessibleToU ser - and that seems to
work for the breadcrumbs (because it doesn't show anything if I go to an
"invalid" page) - but it doesn't do anything to the menu (or the treeview
either, for that matter). I basically check a couple hard-coded "roles" to
the "roles" that are associated with the current node.

From what I've been piecing together, it looks like the menu will only
trim away the unwanted menu items if the provider has the
securityTrimmin gEnabled="true" - but when I try to add that to the
<providers> section in web.config - I get a red-squiggly and a compiler
warning that it's invalid (where it used to be valid in old versions).

BOTTOM LINE:
I need to prune the menu hierarchy based on user permissions. One user may
only see literally one item and another user may see a few dozen - or at
least that's what I need to replicate.

How can I have the menu control (or the treeview) prune away the things
that the current user isn't supposed to see??

[RCS]

Well, I'm creating the sitemap on the fly - but yes, this is exactly what
I'm doing.

The problem comes in with telling this sitemap (and the menu or the
treeview) that the currently logged in user does not have access to that
"Salaries" node in your example below.

And the academic solution from Microsoft is to put the users in your
web.config and use an <authorizatio n> section to allow/deny people. But I
have a few thousand dynamic users - so I need to programatically validate
whether a user (and I know their roles) is supposed to see a particular node
item (which has a role associated).

*How* do I accomplish this?

"RedEye" <re*******@hotm ail.com> wrote in message
news:%2******** ********@TK2MSF TNGP15.phx.gbl. ..

Have you tried to using the roles attribute in the site map file?

<siteMap>
<siteMapNode title="Home" description="" url="default.as px">
<siteMapNode title="Announce ments" url="Announceme nts.aspx"
description="In formation for all employees" roles="*" />
<siteMapNode title="Salaries " url="Salaries.a spx"
description="Sa lary data" roles="Managers ,CEOs" />
<siteMapNode>
</siteMap>

I hope this helps
RedEye

"RCS" <rs****@gmail.c om> wrote in message
news:FQ******** *********@newss vr33.news.prodi gy.com...

All,

OK, so I'm working on a template for our new ASP.NET applications. Part
of this, includes using the new menu and breadcrumbs control in ASP.NET
2.0 (I'm using beta 2).

I put the hierarchy of the applications and navigation in a database, and
am able to pull that into the app by inheriting StaticSiteMapPr ovider. So
that's set and works great.

So then I realize that it builds the sitemap at the application level,
not at the user level. So I've been looking into how to restrict the menu
items - based on security I will get from the database.

In my inherited class, I override IsAccessibleToU ser - and that seems to
work for the breadcrumbs (because it doesn't show anything if I go to an
"invalid" page) - but it doesn't do anything to the menu (or the treeview
either, for that matter). I basically check a couple hard-coded "roles"
to the "roles" that are associated with the current node.

From what I've been piecing together, it looks like the menu will only
trim away the unwanted menu items if the provider has the
securityTrimmin gEnabled="true" - but when I try to add that to the
<providers> section in web.config - I get a red-squiggly and a compiler
warning that it's invalid (where it used to be valid in old versions).

BOTTOM LINE:
I need to prune the menu hierarchy based on user permissions. One user
may only see literally one item and another user may see a few dozen - or
at least that's what I need to replicate.

How can I have the menu control (or the treeview) prune away the things
that the current user isn't supposed to see??

[Scott Allen]

Hi RCS:

It's true, you must use securityTrimmin gEnabled="true" . This works
well.

Ignore the red squiggly line. Unfortunately, the validation in VS 2005
can only take into consideration the settings that are common to all
site map providers. The securityTrimmin gEnabled attribute is a setting
specific to the Xml site map provider that ships with asp.net 2.0. It
works, even though the IDE doesn't know about it, the provider does.

It's jus a case of the validation being a little overzealous.

--
Scott
http://www.OdeToCode.com/blogs/scott/
On Thu, 14 Jul 2005 18:06:29 GMT, "RCS" <rs****@gmail.c om> wrote:

All,

OK, so I'm working on a template for our new ASP.NET applications. Part of
this, includes using the new menu and breadcrumbs control in ASP.NET 2.0
(I'm using beta 2).

I put the hierarchy of the applications and navigation in a database, and am
able to pull that into the app by inheriting StaticSiteMapPr ovider. So
that's set and works great.

So then I realize that it builds the sitemap at the application level, not
at the user level. So I've been looking into how to restrict the menu
items - based on security I will get from the database.

In my inherited class, I override IsAccessibleToU ser - and that seems to
work for the breadcrumbs (because it doesn't show anything if I go to an
"invalid" page) - but it doesn't do anything to the menu (or the treeview
either, for that matter). I basically check a couple hard-coded "roles" to
the "roles" that are associated with the current node.

From what I've been piecing together, it looks like the menu will only trim
away the unwanted menu items if the provider has the
securityTrimmi ngEnabled="true " - but when I try to add that to the
<providers> section in web.config - I get a red-squiggly and a compiler
warning that it's invalid (where it used to be valid in old versions).

BOTTOM LINE:
I need to prune the menu hierarchy based on user permissions. One user may
only see literally one item and another user may see a few dozen - or at
least that's what I need to replicate.

How can I have the menu control (or the treeview) prune away the things that
the current user isn't supposed to see??

[RCS]

Scott - thanks..

Even if I do do this, A) if I do this in my page_load:

Response.Write( this.SiteMapDat aSource1.Provid er.SecurityTrim mingEnabled.ToS tring());

(Assuming that SiteMapDataSour ce1 points to my custom SiteMapProvider ) - it
returns false. Then, in my class, I do this, to overwrite the default
implementation:

public new bool SecurityTrimmin gEnabled = true;

Still - same result. It's beginning to look like I need to inherit from
higher up the tree - like SiteMapProvider (instead of
StaticSiteMapPr ovider) - or XmlSiteMapProvi der or ProviderBase

But even if I did - and managed to get that to work, I'm not sure it will
solve my problem. Because at this point, I'm almost convinced that MY
sitemaprovider truly doesn't support SecurityTrimmin gEnabled - and I don't
know where to begin, to make it support it.
Lastly - I could've solved all of this last week, if I could just build a
sitemap on a per-user basis (instead of per-application). I could handle all
the security in the database and just return the valid menu items for this
user.

Any ideas on how to make a sitemapprovider (and more specifically - a
SiteMapDataSour ce) - able to be used on a per-user basis???? Thanks again!
"Scott Allen" <sc***@nospam.o detocode.com> wrote in message
news:qi******** *************** *********@4ax.c om...

Hi RCS:

It's true, you must use securityTrimmin gEnabled="true" . This works
well.

Ignore the red squiggly line. Unfortunately, the validation in VS 2005
can only take into consideration the settings that are common to all
site map providers. The securityTrimmin gEnabled attribute is a setting
specific to the Xml site map provider that ships with asp.net 2.0. It
works, even though the IDE doesn't know about it, the provider does.

It's jus a case of the validation being a little overzealous.

--
Scott
http://www.OdeToCode.com/blogs/scott/
On Thu, 14 Jul 2005 18:06:29 GMT, "RCS" <rs****@gmail.c om> wrote:

All,

OK, so I'm working on a template for our new ASP.NET applications. Part of
this, includes using the new menu and breadcrumbs control in ASP.NET 2.0
(I'm using beta 2).

I put the hierarchy of the applications and navigation in a database, and
am
able to pull that into the app by inheriting StaticSiteMapPr ovider. So
that's set and works great.

So then I realize that it builds the sitemap at the application level, not
at the user level. So I've been looking into how to restrict the menu
items - based on security I will get from the database.

In my inherited class, I override IsAccessibleToU ser - and that seems to
work for the breadcrumbs (because it doesn't show anything if I go to an
"invalid" page) - but it doesn't do anything to the menu (or the treeview
either, for that matter). I basically check a couple hard-coded "roles" to
the "roles" that are associated with the current node.

From what I've been piecing together, it looks like the menu will only
trim
away the unwanted menu items if the provider has the
securityTrimm ingEnabled="tru e" - but when I try to add that to the
<providers> section in web.config - I get a red-squiggly and a compiler
warning that it's invalid (where it used to be valid in old versions).

BOTTOM LINE:
I need to prune the menu hierarchy based on user permissions. One user may
only see literally one item and another user may see a few dozen - or at
least that's what I need to replicate.

How can I have the menu control (or the treeview) prune away the things
that
the current user isn't supposed to see??

[Scott Allen]

Hi Rcs:

You can always plug your own custom site map provider in, although
I've been using security trimming so that should work. It will build
the menu control such that the user only sees what they are allowed to
navigate to.

In the providers section, did you have a <remove> element in to make
sure it's not using the default configuration?

--
Scott
http://www.OdeToCode.com/blogs/scott/

On Fri, 15 Jul 2005 17:27:50 GMT, "RCS" <rs****@gmail.c om> wrote:

Scott - thanks..

Even if I do do this, A) if I do this in my page_load:

Response.Write( this.SiteMapDat aSource1.Provid er.SecurityTrim mingEnabled.ToS tring());

(Assuming that SiteMapDataSour ce1 points to my custom SiteMapProvider ) - it
returns false. Then, in my class, I do this, to overwrite the default
implementation :

public new bool SecurityTrimmin gEnabled = true;

Still - same result. It's beginning to look like I need to inherit from
higher up the tree - like SiteMapProvider (instead of
StaticSiteMapP rovider) - or XmlSiteMapProvi der or ProviderBase

But even if I did - and managed to get that to work, I'm not sure it will
solve my problem. Because at this point, I'm almost convinced that MY
sitemaprovid er truly doesn't support SecurityTrimmin gEnabled - and I don't
know where to begin, to make it support it.
Lastly - I could've solved all of this last week, if I could just build a
sitemap on a per-user basis (instead of per-application). I could handle all
the security in the database and just return the valid menu items for this
user.

Any ideas on how to make a sitemapprovider (and more specifically - a
SiteMapDataSou rce) - able to be used on a per-user basis???? Thanks again!
"Scott Allen" <sc***@nospam.o detocode.com> wrote in message
news:qi******* *************** **********@4ax. com...

Hi RCS:

It's true, you must use securityTrimmin gEnabled="true" . This works
well.

Ignore the red squiggly line. Unfortunately, the validation in VS 2005
can only take into consideration the settings that are common to all
site map providers. The securityTrimmin gEnabled attribute is a setting
specific to the Xml site map provider that ships with asp.net 2.0. It
works, even though the IDE doesn't know about it, the provider does.

It's jus a case of the validation being a little overzealous.

--
Scott
http://www.OdeToCode.com/blogs/scott/
On Thu, 14 Jul 2005 18:06:29 GMT, "RCS" <rs****@gmail.c om> wrote:

All,

OK, so I'm working on a template for our new ASP.NET applications. Part of
this, includes using the new menu and breadcrumbs control in ASP.NET 2.0
(I'm using beta 2).

I put the hierarchy of the applications and navigation in a database, and
am
able to pull that into the app by inheriting StaticSiteMapPr ovider. So
that's set and works great.

So then I realize that it builds the sitemap at the application level, not
at the user level. So I've been looking into how to restrict the menu
items - based on security I will get from the database.

In my inherited class, I override IsAccessibleToU ser - and that seems to
work for the breadcrumbs (because it doesn't show anything if I go to an
"invalid" page) - but it doesn't do anything to the menu (or the treeview
either, for that matter). I basically check a couple hard-coded "roles" to
the "roles" that are associated with the current node.

From what I've been piecing together, it looks like the menu will only
trim
away the unwanted menu items if the provider has the
securityTrim mingEnabled="tr ue" - but when I try to add that to the
<providers > section in web.config - I get a red-squiggly and a compiler
warning that it's invalid (where it used to be valid in old versions).

BOTTOM LINE:
I need to prune the menu hierarchy based on user permissions. One user may
only see literally one item and another user may see a few dozen - or at
least that's what I need to replicate.

How can I have the menu control (or the treeview) prune away the things
that
the current user isn't supposed to see??

[RCS]

Hiya,

I'm already doing that - I inherited from StaticSiteMapPr ovider - and the
menu is populated correctly with ALL possible menu options (from a SQL
databsae) - including menu options inappropriate for some users.

Assuming my inherited is named MySiteMapProvid er - I have this in my
web.config:

<siteMap defaultProvider ="MySiteMapProv ider" enabled="true">
<providers>
<clear/>
<add name="MySiteMap Provider" securityTrimmin gEnabled="true"
type="MySiteMap Provider"></add>
</providers>
</siteMap>

And again - my provider works perfectly. The problem is, I need to prune
back menu items (or nodes within the provider) so that the current user sees
the appropriate menu items.

I think I've hit the end of the Internet - I've scoured every resource I
know and I'm pretty much at a standstill.

thanks again!

"Scott Allen" <sc***@nospam.o detocode.com> wrote in message
news:s4******** *************** *********@4ax.c om...

Hi Rcs:

You can always plug your own custom site map provider in, although
I've been using security trimming so that should work. It will build
the menu control such that the user only sees what they are allowed to
navigate to.

In the providers section, did you have a <remove> element in to make
sure it's not using the default configuration?

--
Scott
http://www.OdeToCode.com/blogs/scott/

On Fri, 15 Jul 2005 17:27:50 GMT, "RCS" <rs****@gmail.c om> wrote:

Scott - thanks..

Even if I do do this, A) if I do this in my page_load:
Response.Write( this.SiteMapDat aSource1.Provid er.SecurityTrim mingEnabled.ToS tring());

(Assuming that SiteMapDataSour ce1 points to my custom SiteMapProvider ) -
it
returns false. Then, in my class, I do this, to overwrite the default
implementatio n:

public new bool SecurityTrimmin gEnabled = true;

Still - same result. It's beginning to look like I need to inherit from
higher up the tree - like SiteMapProvider (instead of
StaticSiteMap Provider) - or XmlSiteMapProvi der or ProviderBase

But even if I did - and managed to get that to work, I'm not sure it will
solve my problem. Because at this point, I'm almost convinced that MY
sitemaprovide r truly doesn't support SecurityTrimmin gEnabled - and I don't
know where to begin, to make it support it.
Lastly - I could've solved all of this last week, if I could just build a
sitemap on a per-user basis (instead of per-application). I could handle
all
the security in the database and just return the valid menu items for this
user.

Any ideas on how to make a sitemapprovider (and more specifically - a
SiteMapDataSo urce) - able to be used on a per-user basis???? Thanks again!
"Scott Allen" <sc***@nospam.o detocode.com> wrote in message
news:qi****** *************** ***********@4ax .com...

Hi RCS:

It's true, you must use securityTrimmin gEnabled="true" . This works
well.

Ignore the red squiggly line. Unfortunately, the validation in VS 2005
can only take into consideration the settings that are common to all
site map providers. The securityTrimmin gEnabled attribute is a setting
specific to the Xml site map provider that ships with asp.net 2.0. It
works, even though the IDE doesn't know about it, the provider does.

It's jus a case of the validation being a little overzealous.

--
Scott
http://www.OdeToCode.com/blogs/scott/
On Thu, 14 Jul 2005 18:06:29 GMT, "RCS" <rs****@gmail.c om> wrote:

All,

OK, so I'm working on a template for our new ASP.NET applications. Part
of
this, includes using the new menu and breadcrumbs control in ASP.NET 2.0
(I'm using beta 2).

I put the hierarchy of the applications and navigation in a database,
and
am
able to pull that into the app by inheriting StaticSiteMapPr ovider. So
that's set and works great.

So then I realize that it builds the sitemap at the application level,
not
at the user level. So I've been looking into how to restrict the menu
items - based on security I will get from the database.

In my inherited class, I override IsAccessibleToU ser - and that seems to
work for the breadcrumbs (because it doesn't show anything if I go to an
"invalid" page) - but it doesn't do anything to the menu (or the
treeview
either, for that matter). I basically check a couple hard-coded "roles"
to
the "roles" that are associated with the current node.

From what I've been piecing together, it looks like the menu will only
trim
away the unwanted menu items if the provider has the
securityTri mmingEnabled="t rue" - but when I try to add that to the
<provider s> section in web.config - I get a red-squiggly and a compiler
warning that it's invalid (where it used to be valid in old versions).

BOTTOM LINE:
I need to prune the menu hierarchy based on user permissions. One user
may
only see literally one item and another user may see a few dozen - or at
least that's what I need to replicate.

How can I have the menu control (or the treeview) prune away the things
that
the current user isn't supposed to see??

[Scott Allen]

I know there is not a tremendous amount published yet in this area.
Best of luck.

--
Scott
http://www.OdeToCode.com/blogs/scott/

On Fri, 15 Jul 2005 18:27:28 GMT, "RCS" <rs****@gmail.c om> wrote:

Hiya,

I'm already doing that - I inherited from StaticSiteMapPr ovider - and the
menu is populated correctly with ALL possible menu options (from a SQL
databsae) - including menu options inappropriate for some users.

Assuming my inherited is named MySiteMapProvid er - I have this in my
web.config:

<siteMap defaultProvider ="MySiteMapProv ider" enabled="true">
<providers>
<clear/>
<add name="MySiteMap Provider" securityTrimmin gEnabled="true"
type="MySiteMa pProvider"></add>
</providers>
</siteMap>

And again - my provider works perfectly. The problem is, I need to prune
back menu items (or nodes within the provider) so that the current user sees
the appropriate menu items.

I think I've hit the end of the Internet - I've scoured every resource I
know and I'm pretty much at a standstill.

thanks again!

[Janet Fisher]

Not much except for here: http://msdn2.microsoft.com/library/e468hxky.aspx
Some good forum posts at
http://forums.asp.net/search/SearchR...trimming&f=&u= too.

--JF

"Scott Allen" wrote:

I know there is not a tremendous amount published yet in this area.
Best of luck.

--
Scott
http://www.OdeToCode.com/blogs/scott/

On Fri, 15 Jul 2005 18:27:28 GMT, "RCS" <rs****@gmail.c om> wrote:

Hiya,

I'm already doing that - I inherited from StaticSiteMapPr ovider - and the
menu is populated correctly with ALL possible menu options (from a SQL
databsae) - including menu options inappropriate for some users.

Assuming my inherited is named MySiteMapProvid er - I have this in my
web.config:

<siteMap defaultProvider ="MySiteMapProv ider" enabled="true">
<providers>
<clear/>
<add name="MySiteMap Provider" securityTrimmin gEnabled="true"
type="MySiteMa pProvider"></add>
</providers>
</siteMap>

And again - my provider works perfectly. The problem is, I need to prune
back menu items (or nodes within the provider) so that the current user sees
the appropriate menu items.

I think I've hit the end of the Internet - I've scoured every resource I
know and I'm pretty much at a standstill.

thanks again!