[Solved] Security Trimming using Site Map in Hybrid Web Forms / MVC Application

[Brett]

Hello Telerik Team,

We're currently migrating to MVC technology.  Our application has legacy pages using web forms and new pages using MVC.  I was able to use the MVC menu with our legacy site maps; however, security  trimming is not applied to nodes pointing to web form pages.  For example, the Telerik MVC menu will not trim the following node from the site map, even though the user does not have these roles:

      <siteMapNode
        url="~/Sources/ServiceManager.aspx"
        title="Services"
        description="Services"
        roles="StudyManager,System"/>

Note that the link is to a web form.  Is there any way to apply security trimming to such nodes?  In this case, there is no controller / action to decorate with the [Authorize] attribute.

Thanks in advance.

[Brett]

I solved this problem by inspecting the roles during data binding:

@(Html.Telerik().Menu()
  .Name("Menu1")
  .BindTo("smds", (item, node) =>
  {
    // images
    item.ImageUrl = node.Attributes["imageUrl"] as string;
    // security trimming
    string roles = node.Attributes["roles"] as string;
    if (!@User.IsInRoles(roles))
      item.Visible = false;
    })
)