Usando SqlSiteMapProvider

Pessoal em meu site eu utilizei um provedor SiteMap baseado em sql. O provedor funciona, porem não sei porque ele esta ignorando o parametro Roles, pois independente da role que eu coloque o menu sempre exibe todos os itens.

Fiz um teste pelo ItemDataBound

SiteMapNode Node = (SiteMapNode)args.Item.DataItem;

Node.Roles[0].ToString()e por aqui ele traz o nome da role, mas ignora esse parametro.

Esse problema seria tipico se a propriedade securityTrimmingEnabled estivesse desabilitada, mas como pode ser visto ela esta habilitada.

<siteMap enabled="true" defaultProvider="SigavSiteMapProvider">
 <providers>
 <add name="SigavSiteMapProvider"
 type="FrontOffice.Security.SigavSiteMapProvider"
 securityTrimmingEnabled="true"
 connectionStringName="SigavConnectionString"/>
 </providers>
 </siteMap>

segue a classe que estou utilizando.

using System;
using System.Web;
using System.Data;
using System.Data.SqlClient;
using System.Collections.Specialized;
using System.Configuration;
using System.Web.Configuration;
using System.Collections.Generic;
using System.Runtime.CompilerServices;
using System.Configuration.Provider;
using System.Security.Permissions;
using System.Data.Common;

namespace FrontOffice.Security
{
[SqlClientPermission(SecurityAction.Demand, Unrestricted = true)]
public class SigavSiteMapProvider : StaticSiteMapProvider
{

 private const string _errmsg1 = "Missing node ID";
 private const string _errmsg2 = "Duplicate node ID";
 private const string _errmsg3 = "Missing parent ID";
 private const string _errmsg4 = "Invalid parent ID";
 private const string _errmsg5 = "Empty or missing connectionStringName";
 private const string _errmsg6 = "Missing connection string";
 private const string _errmsg7 = "Empty connection string";

 private string _connect;
 private int _indexID, _indexNome, _indexDesc, _indexUrl, _indexImageUrl, _indexRoles, _indexParent;

 private Dictionary<int, SiteMapNode> _nodes = new Dictionary<int, SiteMapNode>(16);
 private SiteMapNode _root;

 public override void Initialize(string name, NameValueCollection config)
 {
 // Verify that config isn't null
 if (config == null)
 throw new ArgumentNullException("config");

 // Assign the provider a default name if it doesn't have one
 if (String.IsNullOrEmpty(name))
 name = "SigavSiteMapProvider";

 // Add a default "description" attribute to config if the
 // attribute doesn't exist or is empty
 if (string.IsNullOrEmpty(config["description"]))
 {
 config.Remove("description");
 }

 // Call the base class's Initialize method
 base.Initialize(name, config);

 // Initialize _connect
 string connect = config["connectionStringName"];

 if (String.IsNullOrEmpty(connect))
 throw new ProviderException(_errmsg5);

 config.Remove("connectionStringName");

 if (WebConfigurationManager.ConnectionStrings[connect] == null)
 throw new ProviderException(_errmsg6);

 _connect = WebConfigurationManager.ConnectionStrings[connect].ConnectionString;

 if (String.IsNullOrEmpty(_connect))
 throw new ProviderException(_errmsg7);

 // In beta 2, SiteMapProvider processes the
 // securityTrimmingEnabled attribute but fails to remove it.
 // Remove it now so we can check for unrecognized
 // configuration attributes.

 if (config["securityTrimmingEnabled"] != null)
 config.Remove("securityTrimmingEnabled");

 // Throw an exception if unrecognized attributes remain
 if (config.Count > 0)
 {
 string attr = config.GetKey(0);
 if (!String.IsNullOrEmpty(attr))
 throw new ProviderException
 ("Unrecognized attribute: " + attr);
 }
 }

 public override SiteMapNode BuildSiteMap()
 {
 {
 // Return immediately if this method has been called before

 if (_root != null)
 return _root;

 // Query the database for site map nodes
 SqlConnection connection = new SqlConnection(_connect);

 try
 {
 connection.Open();
 SqlCommand command = new SqlCommand("SP_GET_MENU", connection);
 command.CommandType = CommandType.StoredProcedure;
 SqlDataReader reader = command.ExecuteReader();

 _indexID = reader.GetOrdinal("Id");
 _indexUrl = reader.GetOrdinal("Url");
 _indexNome = reader.GetOrdinal("Nome");
 _indexDesc = reader.GetOrdinal("Descricao");
 _indexImageUrl = reader.GetOrdinal("ImageUrl");
 _indexRoles = reader.GetOrdinal("Role");
 _indexParent = reader.GetOrdinal("RelacaoId");

 if (reader.Read())
 {
 // Create the root SiteMapNode and add it to
 // the site map
 _root = CreateSiteMapNodeFromDataReader(reader);
 AddNode(_root, null);

 // Build a tree of SiteMapNodes underneath
 // the root node
 while (reader.Read())
 {
 // Create another site map node and
 // add it to the site map
 SiteMapNode node = CreateSiteMapNodeFromDataReader(reader);
 AddNode(node, GetParentNodeFromDataReader(reader));
 }
 }
 }
 finally
 {
 connection.Close();
 }

 // Return the root SiteMapNode
 return _root;
 }
 }

 protected override SiteMapNode GetRootNodeCore()
 {
 BuildSiteMap();
 return _root;
 }

 // Helper methods
 private SiteMapNode CreateSiteMapNodeFromDataReader(DbDataReader reader)
 {
 // Make sure the node ID is present
 if (reader.IsDBNull(_indexID))
 throw new ProviderException(_errmsg1);

 // Get the node ID from the DataReader
 int id = reader.GetInt32(_indexID);

 // Make sure the node ID is unique
 if (_nodes.ContainsKey(id))
 throw new ProviderException(_errmsg2);

 // Get title, URL, description, and roles from the DataReader
 string title = reader.IsDBNull(_indexNome) ? null : reader.GetString(_indexNome).Trim();
 string description = reader.IsDBNull(_indexDesc) ? null : reader.GetString(_indexDesc).Trim();
 string url = reader.IsDBNull(_indexUrl) ? null : reader.GetString(_indexUrl).Trim();
 string roles = reader.IsDBNull(_indexRoles) ? null : reader.GetString(_indexRoles).Trim();
 string ImageUrl = reader.IsDBNull(_indexImageUrl) ? null : reader.GetString(_indexImageUrl).Trim();

 // If roles were specified, turn the list into a string array
 string[] rolelist = null;
 if (!String.IsNullOrEmpty(roles))
 rolelist = roles.Split(new char[] { ',', ';' }, 512);

 // Create a SiteMapNode
 SiteMapNode node = new SiteMapNode(this, id.ToString(), url, title, description, rolelist, null, null, null);
 node["ImageUrl"] = ImageUrl;

 // Record the node in the _nodes dictionary
 _nodes.Add(id, node);

 // Return the node
 return node;
 }

 private SiteMapNode GetParentNodeFromDataReader(DbDataReader reader)
 {
 // Make sure the parent ID is present
 if (reader.IsDBNull(_indexParent))
 throw new ProviderException(_errmsg3);

 // Get the parent ID from the DataReader
 int pid = reader.GetInt32(_indexParent);

 // Make sure the parent ID is valid
 if (!_nodes.ContainsKey(pid))
 throw new ProviderException(_errmsg4);

 // Return the parent SiteMapNode
 return _nodes[pid];
 }
	}
}