Question:
You create and deploy an intranet application that uses ASP.NET membership and roles. The application master page includes a TreeView control that displays navigation links retrieved from a file named Web.sitemap. Users who are not members of the Admins role receive an "Access is Denied" message when they attempt to follow links to pages within a restricted folder named Admin. You need to ensure that the TreeView control displays navigation links only to pages that the current user is authorized to access. What should you do? (More than one answer choice may achieve the goal. Select the BEST answer.)
A
In the Web.sitemap file, remove entries for pages that are stored in the Admin folder.
B
In the Web.sitemap file, add the roles="Admins" attribute to entries for pages that are stored in the Admin folder.
C
In the code-behind file for the master page, add a method that handles the SiteMap.SiteMapResolve event.
D
In the Web.config file, apply the securityTrimmingEnabled="true" attribute to the default site- map provider.
+ AnswerD
+ Report