473,666 Members | 2,581 Online
Bytes | Software Development & Data Engineering Community
+ Post

Home Posts Topics Members FAQ

SiteMap and security trimming problems

Hi,

I have security trimming enabled in web.config and the following site map
attached to a menu:

<siteMapNode roles="*" url="~/Default.aspx" title="Home" description="">
[...]
<siteMapNode roles="Administ rators,Managers " title="Admin">
<siteMapNode roles="Administ rators" url="~/Admin/AdminOnly.aspx"
title="Admin Only"/>
<siteMapNode roles="Administ rators,Managers "
url="~/Admin/AdminAndManager .aspx" title="Admin and Manager" />
</siteMapNode>
[...]
</siteMapNode>

If I login as a user without Administrators and Managers roles then I cannot
seem "Admin", which is expected. When I login as a user with Adminstrators
role then I can see all items in the menu, which is also expected. But,
when I login as a user with Managers role only then I can still see all menu
items. I thought that "AdminOnly.aspx " node would not be available to
Managers but this is not the case.

Am I missing something obvious here?

I'd appreciate any suggestions.

Thanks,
Bogdan
Jun 27 '08 #1
0 837

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

0
2312
by: mcv | last post by:
I'm currently learning to use Cocoon, and although I really like it, there are a couple of things that don't seem to be explained very well. I've seen lots of articles explaining really complicated stuff with actions and selectors and stuff, but I can't find a simple explanation of how variables in the sitemap actually work. Can anyone direct me to a good article on that? Another problem I'm having is that for some strange reason, my...
1
2003
by: chris.rust | last post by:
Has anyone else had any trouble setting up a sitemap view to be filtered by roles? We've put a cust role provider in place, and we can verify that it's only being called once for each connection, and is returning the correct roles, but... When we specify a role on the top sitemapnode that role seems to add to the roles on lower level nodes, so we end up needing to put roles="*" on the top node, but then regardless of which role we put...
0
979
by: Bill Mild | last post by:
How do I write a derived data source so that I can remove a node from a sitemap data source? Basically, I have a situation where the built-in security trimming is not exactly what I need. I need to exclude certain sitemapnodes from the datasource so that I can bind it to a DataList.
0
957
by: M Hammett | last post by:
I have a site that uses a combination of Sitemap and XMLSiteMapProvider with RoleTrimming=true. It works great when secured for all roles defined for the user. Our site allows the user to run the site using only a single selected role rather than all roles defined for him/her. I can obtain the selected role but how can I tell the SiteMap provider to use only the privileges for the selected role? I have researched this but it does not...
5
1950
by: JJ | last post by:
Although this question involves Flash, I suspect the actual issue is an asp one.. I am trying to open the web.sitemap file in an .swf file enbedded in an asp page (I'm working in VS 2005). I get an error in Flash when it trys to open this file using standard Flash commands. However when I change the file name and command to 'Web.xml' it works. (it also works if I don't change the name, but run the swf in flash player and not via the...
4
1691
by: JJ | last post by:
This sounds easy but I'm going round in circles. I need to make a copy of the file to another xml file, omitting the nodes with a certain role. ??
0
1730
by: rmgalante | last post by:
Hi, I've got my site configured to use a menu control, a site map, security trimming, and roles. Everything seems to be working, except I have the following problem. If I define a hierarchical menu in my sitemap as follows: <siteMap ...> <siteMapNode url="" title="Main Menu" description="" roles="*">
5
15060
by: Tim Mackey | last post by:
hi, i have put my web.sitemap in /App_Data so i can edit it programatically via a web admin page, inheriting the modify permissions from the App_Data folder etc. i was hoping the provider would simply persist any changes i made, but it doesn't happen. e.g. selected.ParentNode.ChildNodes.Remove(selected); throws a NotSupportedException "Collection is read-only"
1
1547
by: Seth Williams | last post by:
Let's say I have an ASP.Net menu, with a datasourceID of a siteMapPath, which of course is based on a web.sitemap file Based on the person logged into the page, I have code in files in the App_Code folder which gets their job code, by which I need to let some people see some things (some root nodes and sometimes it's a sub node) and other people not see things. However, I don't know how to refer to the Menu Items in code As I...
0
8454
marktang
by: marktang | last post by:
ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However, people are often confused as to whether an ONU can Work As a Router. In this blog post, we’ll explore What is ONU, What Is Router, ONU & Router’s main usage, and What is the difference between ONU and Router. Let’s take a closer look ! Part I. Meaning of...
0
8363
by: Hystou | last post by:
Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can effortlessly switch the default language on Windows 10 without reinstalling. I'll walk you through it. First, let's disable language synchronization. With a Microsoft account, language settings sync across devices. To prevent any complications,...
1
8561
by: Hystou | last post by:
Overview: Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows Update option using the Control Panel or Settings app; it automatically checks for updates and installs any it finds, whether you like it or not. For most users, this new feature is actually very convenient. If you want to control the update process,...
0
8645
tracyyun
by: tracyyun | last post by:
Dear forum friends, With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each protocol has its own unique characteristics and advantages, but as a user who is planning to build a smart home system, I am a bit confused by the choice of these technologies. I'm particularly interested in Zigbee because I've heard it does some...
0
7389
agi2029
by: agi2029 | last post by:
Let's talk about the concept of autonomous AI software engineers and no-code agents. These AIs are designed to manage the entire lifecycle of a software development project—planning, coding, testing, and deployment—without human intervention. Imagine an AI that can take a project description, break it down, write the code, debug it, and then launch it, all on its own.... Now, this would greatly impact the work of software developers. The idea...
0
4200
by: TSSRALBI | last post by:
Hello I'm a network technician in training and I need your help. I am currently learning how to create and manage the different types of VPNs and I have a question about LAN-to-LAN VPNs. The last exercise I practiced was to create a LAN-to-LAN VPN between two Pfsense firewalls, by using IPSEC protocols. I succeeded, with both firewalls in the same network. But I'm wondering if it's possible to do the same thing, with 2 Pfsense firewalls...
0
4372
by: adsilva | last post by:
A Windows Forms form does not have the event Unload, like VB6. What one acts like?
2
2013
muto222
by: muto222 | last post by:
How can i add a mobile payment intergratation into php mysql website.
2
1778
bsmnconsultancy
by: bsmnconsultancy | last post by:
In today's digital era, a well-designed website is crucial for businesses looking to succeed. Whether you're a small business owner or a large corporation in Toronto, having a strong online presence can significantly impact your brand's success. BSMN Consultancy, a leader in Website Development in Toronto offers valuable insights into creating effective websites that not only look great but also perform exceptionally well. In this comprehensive...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.