Here's what I have:

web.config:

    <siteMap defaultProvider="XmlSiteMapProvider" enabled="true">
      <providers>
        <add name="XmlSiteMapProvider"
          description="Default SiteMap provider."
          type="System.Web.XmlSiteMapProvider"
          siteMapFile="Web.sitemap"
          securityTrimmingEnabled="true"/>
      </providers>
    </siteMap>

web.sitemap:

<siteMap>
    <siteMapNode url="~/default.aspx" title="Home" description="Home Page" roles="*">
      <siteMapNode url="~/customer/owsSummaryInsured.aspx" title="Summary" description="Insured Summary" roles="Customer" />
      <siteMapNode url="~/customer/owsPoliciesInsured.aspx" title="Policies" description="Current Policies Applie to an Insured" roles="Customer" />
      <siteMapNode url="~/customer/owsVehiclesInsured.aspx" title="Vehicles" description="Insured Vehicles" roles="Customer" />
      <siteMapNode url="~/customer/owsDriversInsured.aspx" title="Drivers" description="Insured Drivers" roles="Customer" />
      <siteMapNode url="~/customer/owsBillingInsured.aspx" title="Billing" description="Insured Billing Statement" roles="Customer" />
      <siteMapNode url="~/customer/owssuggestions.aspx" title="Suggestion" description="Suggestion Form" roles="Customer" />
      <siteMapNode url="~/shared/Documents.aspx?doctype=dynamic&perpolicy=yes" title="Policy Documents" description="Policy Documents" roles="Customer"/>

      <siteMapNode url="~/broker/owsListPolicies.aspx" title="Policies" description="List of Policies" roles="Broker" />
      <siteMapNode url="~/broker/owsSearch.aspx" title="Search" description="Search Option" roles="Broker" />
      <siteMapNode url="~/shared/Documents.aspx?doctype=static" title="Forms" description="Available Broker Forms" roles="Broker" />
      <siteMapNode url="~/shared/Documents.aspx?doctype=dynamic" title="Documents" description="Brokers Documents" roles="Broker" />
      <siteMapNode url="~/broker/owsSuppliesBroker.aspx" title="Supplies" description="Supplies for Brokers" roles="Broker" />
      <siteMapNode url="~/broker/owsSuggestions.aspx" title="Suggestion" description="Suggestion Form" roles="Broker" />
      <siteMapNode url="~/broker/owsCommissionStatements.aspx" title="Statements" description="Commission Statement" roles="Broker" />
      <siteMapNode url="~/broker/Permissions.aspx" title="User Permissions" description="User Permissions" roles="Broker" />
    </siteMapNode>
</siteMap>

My roles are set up so that customers and only customers have access to the customers folder, brokers and only brokers have access to the brokers folder, and customers and brokers have access to the shared folder.

Right now, the only "shared" page they have access to is the "documents" page.  But, brokers have two ways to access the page, customers have 1 (specified through query string).  Because the shared folder is available to both, all three documents.aspx siteMapNodes are showing up in the event of BOTH logins.

I know it doesn't work this way, but is there a(n easy way) to have it show only those with roles specifically specified in the web.sitemap instead of the way it works now.

Thanks in advance!

Hello

I don't know if i'm wrong, but if I should make the solution I would build up the Web.sitemap after the login auth. I would extract the sitemap.nodes from a database and build up the web.sitemap dynamically . This would also be an easy way to maintaince the web.sitemap.

Take a look at the solution here: http://www.codeproject.com/aspnet/DynamicSiteMapPath.asp

Ofcourse you must alter the tables in the database (e.g put in a role column) and change the select statement to something like:

This is quite an interesting situation.  There are a couple ways to fix this but I think the lowest impact would be alias those files with urlMappings. 

If you added something like:

<urlMappings>
  <add url="~/broker/staticdocument.aspx" mappedUrl="~/shared/Documents.aspx?doctype=static" />
</urlMappings>

And then in web.sitemap you would do instead:

<siteMapNode url="~/broker/staticdocument.aspx" title="Forms" ... />

Then, the security trimming would trim this document as if it was under the ~/broker/ area but it would actually link to the shared document.

Would that work for you?

--
Danny