Use securitytrimming to limit role views of Menu and SiteMap

Use securitytrimming to limit role views of Menu and SiteMap.

Modify the Web.config file's configuration tag with:

    <system.web>
    <siteMap defaultProvider="secureProvider">
      <providers>
        <add name="secureProvider" type="System.Web.Xml




Provider"
             siteMapFile="web.sitemap" securityTrimmingEnabled="true"/>
      </providers>
    </siteMap>
    </system.web>

Then modify Web.sitemap to make sure roles parameter is set to * or admin. Notice how I explicitly set the nodes roles parameter in the links outside the website

<?xml version="1.0" encoding="utf-8" ?>
<siteMap xmlns="http://schemas.microsoft.com/AspNet/SiteMap-File-1.0" >
  <siteMapNode url="SiteMap.aspx" title="Site Map"  description="Site Map">
    <siteMapNode url="Default.aspx" title="Home"  description="Home" roles="*">
      <siteMapNode url="Login.aspx" title="Login/Logout"  description="Login or Logout" />
      <siteMapNode url="About.aspx" title="About"  description="About" />
    </siteMapNode>
    <siteMapNode url="~/Tools/Tools.aspx" title="Tools"  description="" roles="*">
      <siteMapNode url="~/Tools/GrowthAnalysis.aspx" title="Growth Analysis"  description="" />
      <siteMapNode url="~/Tools/FundamentalAnalysis.aspx" title="Fundamental Analysis"  description="" />
      <siteMapNode url="~/Tools/PriceToSalesAnalysis.aspx" title="Price To Sales Analysis"  description="" />
      <siteMapNode url="~/Tools/TechnicalAnalysis.aspx" title="Technical Analysis"  description="" />
    </siteMapNode>
    <siteMapNode url="~/MyLists/MyLists.aspx" title="My Lists"  description="" roles="*">
      <siteMapNode url="~/MyLists/Management.aspx" title="Management"  description="" />
      <siteMapNode url="~/MyLists/Tracker.aspx" title="Tracker"  description="" />
    </siteMapNode>
    <siteMapNode url="~/MarketWatch/MarketWatch.aspx" title="Market Watch"  description="" roles="*">
      <siteMapNode url="~/MarketWatch/MarketSummary.aspx" title="Market Summary"  description="" />
      <siteMapNode url="~/MarketWatch/SectorSummary.aspx" title="Sector Summary"  description="" />
      <siteMapNode url="~/MarketWatch/IntermarketSummary.aspx" title="Inter-market Summary"  description="" />
      <siteMapNode url="~/MarketWatch/WorldMarketSummary.aspx" title="World Market Summary"  description="" />
    </siteMapNode>
    <siteMapNode url="~/Media.aspx" title="Media" description="" roles="*">
      <siteMapNode url="http://www.bloomberg.com/news/av/" title="Bloomberg Audio/Video" description="" roles="*" />
      <siteMapNode url="http://www.thestreet.com/_tscnav/audio/taskaudio/index.html" title="Real Story With Aaron Task"  description="" roles="*" />
      <siteMapNode url="http://www.thestreet.com/_tscnav/video/index.html" title="TheStreet.com TV" description="" roles="*" />
      <siteMapNode url="http://online.wsj.com/public/us" title="Wall Street Journal"  description="" roles="*" />
      <siteMapNode url="http://www.nytimes.com/pages/business/index.html" title="New York Times Business"  description="" roles="*" />
      <siteMapNode url="http://markets.usatoday.com/custom/usatoday-com/html-markets.asp" title="USA Today Markets" description="" roles="*" />
      <siteMapNode url="http://www.briefing.com/Investor/Public/MarketSnapshot/HeadlineHits.htm" title="Briefing.com Headline Hits" description="" roles="*" />
      <siteMapNode url="http://www.pbs.org/nbr/" title="PBS Nightly Business Report" description="" roles="*" />
      <siteMapNode url="http://www.redoption.com/shadow_video.php" title="RedOption Shadow Trader Video" description="Weekend Update" roles="*" />
    </siteMapNode>
    <siteMapNode url="~/Commentary.aspx" title="Commentary"  description="" roles="*">
      <siteMapNode url="http://stockmonger.blogspot.com/" title="Stock Monger"  description="" roles="*" />
      <siteMapNode url="http://find.thestreet.com/cgi-bin/texis/find/results.html?nh=20&amp;t=Cramer" title="Jim Cramer"  description="" roles="*" />
      <siteMapNode url="http://www.rightsideadvisors.com/advisors/default.aspx?" title="Richard Suttmeier"  description="" roles="*" />
      <siteMapNode url="http://articles.moneycentral.msn.com/Commentary/Experts/Jubak/Jim_Jubak.aspx" title="Jim Jubak"  description="" roles="*" />
      <siteMapNode url="http://bigpicture.typepad.com/" title="The Big Picture With Barry Ritholtz"  description="" roles="*" />
    </siteMapNode>
    <siteMapNode url="~/Admin/Admin.aspx" title="Admin" description="" roles="Admin">
      <siteMapNode url="~/Admin/UpdateAllStocks.aspx" title="Update All Stocks" description="" roles="Admin"  />
      <siteMapNode url="~/Admin/StockScaffold.aspx" title="Stock Scaffold"  description="" roles="Admin" />
      <siteMapNode url="~/Admin/ManageRoles.aspx" title="Manager User Roles"  description="" roles="Admin" />
      <siteMapNode url="~/Admin/ManageLists.aspx" title="Manage Lists"  description="" roles="Admin" />
    </siteMapNode>
  </siteMapNode>
</siteMap>