u can set the authorization in the webconfig.
I set it wrongly like follows:
that denies your complete project to not logged in users. Better way is to set it to directories like for Publicpages as follows:
<allow users ="*" />
and i had my RadMenu in a ascx control which i placed in the "Controls" Subdirectory.
Which locations authorization i didnt configure (set in the webconfig).