Roles in ora_aspnet_sitemap table

Question

Hi All.
I'm trying to use the Oracle sitemap provider and my menus show up perfect right until I set securityTrimmingEnabled true.
Then no menu items show up.
I can see that ora_aspnet_sitemap table has a column called roles where I wrote everything from the xml notation used by the standard xml provider to the role names or roleid from ora_aspnet_roles talble but nothing seams to work. Having nothing in the roles column also gives no menu items.
Does anyone know what to write in the roles column?
Hope anyone can help :-)
/Nerds rule!

Answer 1

Ok, it seems that I have found a short-term solution. This assumes that the roles are comma-separated Role Names in the ORA_ASPNET_SITEMAP table.
Step 1.
Create a new provider inheriting from OracleSiteMapProvider named CustomOracleSiteMapProvider
Step 2.
Override the method IsAccessibleToUser (code at the end of the post, if needed)
Step 3.
Tell your Web.config that this is the provider to work with.
<siteMap defaultProvider="OracleSiteMapProvider">
<providers>
<clear/>
<add name="OracleSiteMapProvider" type="CustomOracleSiteMapProvider" securityTrimmingEnabled="true" connectionStringName="Oracleconn" applicationName="AppName" />
</providers>
</siteMap>
This seems to be working fine, however, I am convinced there is a better solution of using the out of the box provider.
====================
public override bool IsAccessibleToUser(HttpContext context, SiteMapNode node)
//If Security Trimming is not enabled return true
if (!SecurityTrimmingEnabled)
return true;
//If there are no roles defined for the page
//return true or false depending on your authorization scheme (when true pages with
//no roles are visible to all users, when false no user can access these pages)
if (node.Roles == null || node.Roles.Count == 0)
return false;
//check each role, if the user is in any of the roles return true
foreach (string role in node.Roles)
if (Roles.IsUserInRole(role) || String.Equals(role, "*", StringComparison.InvariantCultureIgnoreCase))
return true;
return false;
}