[Solved] Sitemap Binding and Authorization Filter Across Areas

[Jim]

It seems the Telerik Menu does not recognize the Authorization filter when inside other areas.

I am using sitemap binding to build my menu. 

Inside my "Samples" Area I've decorated an actionmethod with the authorize filter.  While navigating to different pages within that same area the menuitem is not visible.  However as soon as I navigate to a page which has an actionmethod in a different area then "Samples", the menuitem appears even though it should'nt.

Has anybody seen this problem or know how to fix it?

[Georgi Krustev]

Hello Jim,

 
This is not a known issue. Could you please send us the test case? Thus I will be able to review it locally and advice you further.

Kind regards,
Georgi Krustev
the Telerik team

[Jim]

Georgi,

Thanks for your reply.

I've attached a sample solution where I am seeing this issue. 

The web.sitemap file has three items.  "View1" is decorated with the Authorize filter in the controller.  When the application first loads "View1" is hidden.  If you click on "SampleHomeIndex",  "View1" appears even though is is decorated with the Authorize Filter.  If you click on "HomeIndex", "View1" is hidden as expected.

Can you help me figure it out?

Thanks,
Jim

[Georgi Krustev]

Hello Jim,

 
Thank you for getting back to us and for the test project.

You are absolutely correct.

Menu, as other navigational component, uses namespace retrieved from RequestContext and the ControllerName to check whether the Action methods are allowed or not. In the case where Areas are used, the menu does not know for Controllers outside of the current namespace, thus it cannot check whether the requested Actions are allowed or not. That is why, when request Sample/Home/Index URL, Home/View1 is shown.

Unfortunately, we cannot provide proper solution of this issue. In order to achieve your goal, you will need to show/hide MenuItems by yourself. 

Kind regards,
Georgi Krustev
the Telerik team