Security Trimming not working 100% showing some nodes?!?

[funstercinsolata]

This is what i have:

* web.config:
<siteMap enabled="true" defaultProvider="smDefault">
<providers>
<add name="smDefault"
type="System.Web.XmlSiteMapProvider"
securityTrimmingEnabled="true"
siteMapFile="Web.sitemap"/>
</providers>
</siteMap>

* Web.sitemap:
<?xml version="1.0" encoding="utf-8" ?>
<siteMap xmlns="http://schemas.microsoft.com/AspNet/SiteMap-File-1.0" >
<siteMapNode url="home.aspx" title="HOME" roles="*">
<siteMapNode url="" title="DOCUMENTS" roles="admin, user">
<siteMapNode url="dadd.aspx" title="ADD" description=""
roles="admin"/>
<siteMapNode url="dview.aspx" title="VIEW" description=""
roles="admin, user"/>
</siteMapNode>
<siteMapNode url="" title="MANAGE USERS" roles="admin">
<siteMapNode url="dadd.aspx" title="ADD" description=""
roles="admin"/>
</siteMapNode>
</siteMapNode>
</siteMap>
<authorization>
<allow users="*" />
</authorization>

*Master page
<asp:Menu ID="Menu1" runat="server" DataSourceID="ds"
EnableTheming="True" MaximumDynamicDisplayLevels="4"
Orientation="Horizontal"/>
<asp:SiteMapDataSource ID="ds" runat="server" ShowStartingNode="True"
SiteMapProvider="smDefault" />

»user« will see this:
- HOME
- DOCUMENTS
- ADD ( he shouldn't see this!!!!!!!!!)
- VIEW

»admin« will see this:
- HOME
- DOCUMENTS
- ADD
- VIEW
- MANAGE USERS
- ADD


So it does hide item MANAGE USERS but not item DOCUMENTS / ADD!!! Is
this normal? Thanks in advance, Jo.

 

[funstercinsolata]

What i found out is that IT DOES trim
-- any nodes which have no url (submenus)

and IT DOES NOT trim
-- any nodes which have url specified.

 

[funstercinsolata]

Found this and it seems to work:
http://aspadvice.com/blogs/dsussman/archive/2004/10/16/2268.aspx