http://aspadvice.com/blogs/dsussman/archive/2004/10/16/2268.aspx
As per this example, security trimming and web.config security using <location> tags is ideal since it prevents the server from serving pages to undesired users AND doesn't even show them the menu item in a Tree View which uses your site map.
Using Jeff Prosise's code here, http://msdn.microsoft.com/en-us/magazine/cc163657.aspx I've implemented a SQL Server Sitemap provider, and I've further developed a management aspx page, for a user to change everything about the sql server table, including roles, URL, link targets etc..
In Jeff's tutorial, he uses the Roles column, and puts in for instance "Administrators, Managers". I did not like this, because what if the name of the role changes? So I changed his code to ful ...
Go to the complete details ...