Usando SqlSiteMapProvider

[Adriano MSB 0]

Pessoal em meu site eu utilizei um provedor SiteMap baseado em sql. O provedor funciona, porem não sei porque ele esta ignorando o parametro Roles, pois independente da role que eu coloque o menu sempre exibe todos os itens.

 

Fiz um teste pelo ItemDataBound

SiteMapNode Node = (SiteMapNode)args.Item.DataItem;

Node.Roles[0].ToString()

e por aqui ele traz o nome da role, mas ignora esse parametro.

 

 

Esse problema seria tipico se a propriedade securityTrimmingEnabled estivesse desabilitada, mas como pode ser visto ela esta habilitada.

<siteMap enabled="true" defaultProvider="SigavSiteMapProvider">
			<providers>
				<add name="SigavSiteMapProvider"
				  type="FrontOffice.Security.SigavSiteMapProvider"
				  securityTrimmingEnabled="true"
				  connectionStringName="SigavConnectionString"/>
			</providers>
		</siteMap>

 

segue a classe que estou utilizando.

 

using System;
using System.Web;
using System.Data;
using System.Data.SqlClient;
using System.Collections.Specialized;
using System.Configuration;
using System.Web.Configuration;
using System.Collections.Generic;
using System.Runtime.CompilerServices;
using System.Configuration.Provider;
using System.Security.Permissions;
using System.Data.Common;

namespace FrontOffice.Security
{
	[SqlClientPermission(SecurityAction.Demand, Unrestricted = true)]
	public class SigavSiteMapProvider : StaticSiteMapProvider
	{
		private const string _errmsg1 = "Missing node ID";
		private const string _errmsg2 = "Duplicate node ID";
		private const string _errmsg3 = "Missing parent ID";
		private const string _errmsg4 = "Invalid parent ID";
		private const string _errmsg5 = "Empty or missing connectionStringName";
		private const string _errmsg6 = "Missing connection string";
		private const string _errmsg7 = "Empty connection string";

		private string _connect;
		private int _indexID, _indexNome, _indexDesc, _indexUrl, _indexImageUrl, _indexRoles, _indexParent;

		private Dictionary<int, SiteMapNode> _nodes = new Dictionary<int, SiteMapNode>(16);
		private SiteMapNode _root;

		public override void Initialize(string name, NameValueCollection config)
		{
			// Verify that config isn't null
			if (config == null)
				throw new ArgumentNullException("config");

			// Assign the provider a default name if it doesn't have one
			if (String.IsNullOrEmpty(name))
				name = "SigavSiteMapProvider";

			// Add a default "description" attribute to config if the
			// attribute doesn't exist or is empty
			if (string.IsNullOrEmpty(config["description"]))
			{
				config.Remove("description");
			}

			// Call the base class's Initialize method
			base.Initialize(name, config);

			// Initialize _connect
			string connect = config["connectionStringName"];

			if (String.IsNullOrEmpty(connect))
				throw new ProviderException(_errmsg5);

			config.Remove("connectionStringName");

			if (WebConfigurationManager.ConnectionStrings[connect] == null)
				throw new ProviderException(_errmsg6);

			_connect = WebConfigurationManager.ConnectionStrings[connect].ConnectionString;

			if (String.IsNullOrEmpty(_connect))
				throw new ProviderException(_errmsg7);

			// In beta 2, SiteMapProvider processes the
			// securityTrimmingEnabled attribute but fails to remove it.
			// Remove it now so we can check for unrecognized
			// configuration attributes.

			if (config["securityTrimmingEnabled"] != null)
				config.Remove("securityTrimmingEnabled");

			// Throw an exception if unrecognized attributes remain
			if (config.Count > 0)
			{
				string attr = config.GetKey(0);
				if (!String.IsNullOrEmpty(attr))
					throw new ProviderException
						("Unrecognized attribute: " + attr);
			}
		}

		public override SiteMapNode BuildSiteMap()
		{
			{
				// Return immediately if this method has been called before

				if (_root != null)
					return _root;

				// Query the database for site map nodes
				SqlConnection connection = new SqlConnection(_connect);

				try
				{
					connection.Open();
					SqlCommand command = new SqlCommand("SP_GET_MENU", connection);
					command.CommandType = CommandType.StoredProcedure;
					SqlDataReader reader = command.ExecuteReader();

					_indexID = reader.GetOrdinal("Id");
					_indexUrl = reader.GetOrdinal("Url");
					_indexNome = reader.GetOrdinal("Nome");
					_indexDesc = reader.GetOrdinal("Descricao");
					_indexImageUrl = reader.GetOrdinal("ImageUrl");
					_indexRoles = reader.GetOrdinal("Role");
					_indexParent = reader.GetOrdinal("RelacaoId");

					if (reader.Read())
					{
						// Create the root SiteMapNode and add it to
						// the site map
						_root = CreateSiteMapNodeFromDataReader(reader);
						AddNode(_root, null);

						// Build a tree of SiteMapNodes underneath
						// the root node
						while (reader.Read())
						{
							// Create another site map node and
							// add it to the site map
							SiteMapNode node = CreateSiteMapNodeFromDataReader(reader);
							AddNode(node, GetParentNodeFromDataReader(reader));
						}
					}
				}
				finally
				{
					connection.Close();
				}

				// Return the root SiteMapNode
				return _root;
			}
		}

		protected override SiteMapNode GetRootNodeCore()
		{
			BuildSiteMap();
			return _root;
		}

		// Helper methods
		private SiteMapNode CreateSiteMapNodeFromDataReader(DbDataReader reader)
		{
			// Make sure the node ID is present
			if (reader.IsDBNull(_indexID))
				throw new ProviderException(_errmsg1);

			// Get the node ID from the DataReader
			int id = reader.GetInt32(_indexID);

			// Make sure the node ID is unique
			if (_nodes.ContainsKey(id))
				throw new ProviderException(_errmsg2);

			// Get title, URL, description, and roles from the DataReader
			string title = reader.IsDBNull(_indexNome) ? null : reader.GetString(_indexNome).Trim();
			string description = reader.IsDBNull(_indexDesc) ? null : reader.GetString(_indexDesc).Trim();
			string url = reader.IsDBNull(_indexUrl) ? null : reader.GetString(_indexUrl).Trim();
			string roles = reader.IsDBNull(_indexRoles) ? null : reader.GetString(_indexRoles).Trim();
			string ImageUrl = reader.IsDBNull(_indexImageUrl) ? null : reader.GetString(_indexImageUrl).Trim();
			
			// If roles were specified, turn the list into a string array
			string[] rolelist = null;
			if (!String.IsNullOrEmpty(roles))
				rolelist = roles.Split(new char[] { ',', ';' }, 512);

			// Create a SiteMapNode
			SiteMapNode node = new SiteMapNode(this, id.ToString(), url, title, description, rolelist, null, null, null);
			node["ImageUrl"] = ImageUrl;

			// Record the node in the _nodes dictionary
			_nodes.Add(id, node);

			// Return the node		
			return node;
		}

		private SiteMapNode GetParentNodeFromDataReader(DbDataReader reader)
		{
			// Make sure the parent ID is present
			if (reader.IsDBNull(_indexParent))
				throw new ProviderException(_errmsg3);

			// Get the parent ID from the DataReader
			int pid = reader.GetInt32(_indexParent);

			// Make sure the parent ID is valid
			if (!_nodes.ContainsKey(pid))
				throw new ProviderException(_errmsg4);

			// Return the parent SiteMapNode
			return _nodes[pid];
		}
	}
}

[Adriano MSB 0]

E ae pessoal ninguem tem nem idéia??

[Oenning 0]

Nunca fiz nada parecido. Na verdade, nunca usei o sitemap :D

Fiz uma pesquisa e achei isso: http://forums.asp.net/p/991718/1289451.aspx

Parece que você precisa dar override em alguns métodos ali e verificar se o usuário tem permissão.

Tem esse aqui também: http://www.mytakeon.net/post/2006/09/The-S...006-09-20).aspx