If you're using a Membership Provider and Role Provider, you can use a
web.sitemap in conjunction with your web application to restrict access to
pages. In addition, menu controls that are bound to the XmlSiteMapProvider
will automatically hide menu items to pages that are not available to the
logged-in user, as well as restrict direct access to those pages. The
web.sitemap can include role attributes, as in the following example:

 <siteMapNode url="~/employment/Default.aspx" title="Employment"
  description="Join the professional team of Example." roles="*">
  <siteMapNode url="~/Employment/opportunities.aspx" title="Opportunities"
   description="Example &#38; Associates, Inc. Opportunities for
Employment"  roles="*"/>
  <siteMapNode url="~/Employment/benefits.aspx" title="Benefits"
   description="Example &#38; Associates, Inc. Benefits"  roles="*"/>
  <siteMapNode url="~/Employment/leaving_military.aspx" title="Leaving the
Military?"
   description="Example &#38; Associates, Inc. Opportunites for Those
Leaving the Military"  roles="*"/>
 </siteMapNode>
 <siteMapNode url="~/partners/Default.aspx" title="Contract Vehicles"
  description="Some of the fine organizations that have partnered with
Example &#38; Associates, Inc.." roles="*">
 </siteMapNode>