Quick search brings this http://forums.asp.net/p/1096023/1654733.aspx

>Hi All,
>
>On my ASP.NET page I have a TreeView control bind to the SiteMapDataSource using the following SiteMap file:
>
>
>

><?xml version="1.0" encoding="utf-8" ?>
><siteMap>
>  <siteMapNode title="Home" url="mDefault.aspx">
>
>    <siteMapNode title="Add New Product" description="Add New Product" 
>                 url="mCreateNew.aspx" 
>                 role="Administrator,Developer,Vendor,PurchasingAgent,PurchasingManager">
>    </siteMapNode>
>
>    <siteMapNode title="Item Update" description="Item Update" 
>                 url="mUpdateItemSearch.aspx" 
>                 role="Administrator,Developer,Merchandising">
>    </siteMapNode>
>
>    <siteMapNode title="Quick Upload" description="Quick Upload" 
>                 url="mQuickUpload.aspx" 
>                 role="Administrator,Developer,Merchandising" >
>    </siteMapNode>
>
>  </siteMapNode>
></siteMap>
>

>
>My goal is to limit the TreeView nodes based on the Roles Membership but the above does not work. All users can see all TreeView menu options as soon as they login. What am I missing?
>
>Thank you,
>Daniel