Site Map - roles

Hello:
In my site map I have assigned two roles:  Project Manager and Administrator.  In one of the child node the role is assigned only to Administrator.  Member of ProjectManager group are still getting access to the Administrator assigned menu item and the itemd are visible to them.  This is a code just for a menu called Project Management.  I also limited access in config fiele.
<?xml version="1.0" encoding="utf-8" ?> <siteMap xmlns="http://schemas.microsoft.com/AspNet/SiteMap-File-1.0" > <siteMapNode url="" title=""  description="" roles="*" >
<siteMapNode url="" title="Project Management"  description="" roles="ProjectManager,  Administrator" >
<siteMapNode url=& ...