I just came across an inspired post by Maarten Balliauw who has written an article about how to use a build an ASP.NET MVC sitemap provider which supports security trimming.
Check it out.
ZK@Web Marketing Blog
Monday, May 25, 2009 9:58 AM
its a nice article but i have one question to ask, how can we secure 'Upload.aspx' without creating the 'users' folder. in other words how can we restrict access on the files present on the root. for example, i have a.aspx, b.aspx and c.aspx at web site root and i need following: a.aspx should be accessible to admin only. b.aspx should be accessible to sales dept only. c.aspx should be accessible to power users only. login.aspx should be accessible to all. Thanks in advance