So, I'm sorry to seem thick, I'm really trying to understand how this works...but I defined 2 roles in my db. 'Administrators', and 'Users'. I put the attribute: roles="Users" on one siteMapNode and: roles="Administrators" on another...and yet even as an anonymous user I can see both items...what is it that I've missed?

Hi there,

Take a look here: http://p2p.wrox.com/topic.asp?TOPIC_ID=47140

You need to set securityTrimmingEnabled in the web.config file....

Cheers,

Imar
---------------------------------------
Imar Spaanjaars
Everyone is unique, except for me.
Author of ASP.NET 2.0 Instant Results and Beginning Dreamweaver MX / MX 2004