Security for Non-MVC node

Sep 11, 2009 at 1:57 PM


I am wondering how to get "IsAccessibleToUser" to work for a non-MVC node.  It enters the method, but ParentProvider is always null and I am not sure what it is expecting there.

                if (provider.ParentProvider != null)
return provider.ParentProvider.IsAccessibleToUser(context, node);
else { return false; // This should not be happening, but in the case it does: security first! } It simply jumps to the 'else' statement and returns false every time.

I can't find anywhere that ParentProvider is set or what to set it to.

Any thoughts?

Sep 11, 2009 at 3:00 PM

Can you post your sitemap XML here?

Sep 11, 2009 at 3:11 PM
Thanks for the quick response!  Awesome project!

This is the simple sitemap I have doing my testing with.

siteMap> <mvcSiteMapNode title="Home" controller="Demo" action="Default" > <mvcSiteMapNode title="Procurement" controller="Demo" action="UIDProcurement" > <siteMapNode title="UID Requests" url="~/Procurement/UIDRequestList.aspx" roles="Administrator" /> <siteMapNode title="UID Queues" url="~/Procurement/UIDQueueList.aspx" roles="Administrator" /> </mvcSiteMapNode> </mvcSiteMapNode> </siteMap>


Sep 14, 2009 at 7:30 AM
This discussion has been copied to a work item. Click here to go to the work item and continue the discussion.