Role-based file access and menu security

Show certain menu items and certain files to members of Administrators role. All else see basic site.

ASP.Net Web Site Administration Tool
Set one user to Administrators
Have another user that is in no role.

web.config, deny all but Administrators access to admin directory:

‹location path=”admin”›
‹system.web›
‹authorization›
‹allow roles=”Administrators” /›
‹deny users=”*”/›
‹/authorization›
‹/system.web›

‹/location›

web.config, system.web, roleManager enabled=”true”
web.config, membership, providers add defaultProvider:
‹siteMap defaultProvider=”AspNetXmlSiteMapProvider” enabled=”true”›
‹providers›
‹remove name=”AspNetXmlSiteMapProvider”/›
‹add name=”AspNetXmlSiteMapProvider” description=”SiteMap provider which reads in .sitemap XML files.” type=”System.Web.XmlSiteMapProvider” securityTrimmingEnabled=”true” siteMapFile=”Web.sitemap”/›
‹/providers›
‹/siteMap›

web.sitemap, add roles attribute to menu items to be masked:

‹siteMapNode url=”admin/admin.aspx” title=”Admin” Description=”Edit Functions” roles=”Administrators” ›
‹siteMapNode url=”admin/shelters_edit.aspx” title=”Shelters” description=”Edit Shelters/Rescues” roles=”Administrators” /›