Question

Without securityTrimmingEnabled, the menu show up fine, but as soon as I turn it on, the entire menu disappears. Like, I am talking about everything, even for the default page and those that does not need authorization.

Here is the code for Web.sitemap

    <?xml version="1.0" encoding="utf-8" ?>
    <siteMap xmlns="http://schemas.microsoft.com/AspNet/SiteMap-File-1.0">
      <siteMapNode>
        <siteMapNode title="Home" url="~/Default.aspx" />
        <siteMapNode title="About" url="~/About.aspx" />
        <siteMapNode title="Suppliers" url="~/Suppliers.aspx" />
        <siteMapNode title="Departments" url="~/Departments.aspx" />
        <siteMapNode title="Management">
          <siteMapNode title="Account" url="~/Account_Employee.aspx" />
          <siteMapNode title="Store" url="~/StoreManagement.aspx" />
          <siteMapNode title="Chain" url="~/ChainManagement.aspx" />
          <siteMapNode title="System" url="~/SystemAdmin.aspx" />
        </siteMapNode>
      </siteMapNode>
    </siteMap>

Here is the code for Site authorization setup in web.config

        <authentication mode="Forms">
            <forms loginUrl="~/Account/Login.aspx" timeout="2880"/>
        </authentication>
        <membership defaultProvider="TestServerMembership">
            <providers>
                <clear/>
                <add name="TestServerMembership" type="System.Web.Security.SqlMembershipProvider" connectionStringName="TestServerConnection" enablePasswordRetrieval="false" enablePasswordReset="true" requiresUniqueEmail="false" requiresQuestionAndAnswer="false" minRequiredPasswordLength="5" minRequiredNonalphanumericCharacters="0" applicationName="SampleSite" passwordFormat="Hashed"/>
            </providers>
        </membership>
        <profile>
            <providers>
                <clear/>
                <add name="TestServerMembershipProvider" type="System.Web.Profile.SqlProfileProvider" connectionStringName="TestServer" applicationName="/"/>
            </providers>
        </profile>
        <roleManager enabled="true" defaultProvider="TestServerRoleProvider">
            <providers>
                <clear/>
                <add connectionStringName="TestServerConnection" applicationName="/" name="TestServerRoleProvider" type="System.Web.Security.SqlRoleProvider"/>
            </providers>
        </roleManager>
        <siteMap enabled="true">
            <providers>
                <clear/>
                <add siteMapFile="Web.sitemap" name="AspNetXmlSiteMapProvider" type="System.Web.XmlSiteMapProvider" securityTrimmingEnabled="true"/>
            </providers>
        </siteMap>

Here is the code for Role setup in web.config

 <location path="Default.aspx">
    <system.web>
      <authorization>
        <allow users="*"/>
      </authorization>
    </system.web>
  </location>
    <location path="About.aspx">
        <system.web>
            <authorization>
        <deny users="*"/>
                <allow roles="User"/>
            </authorization>
        </system.web>
    </location>
    <location path="Departments.aspx">
        <system.web>
            <authorization>
        <deny users="*"/>
        <allow roles="User"/>
            </authorization>
        </system.web>
    </location>
    <location path="Suppliers.aspx">
        <system.web>
            <authorization>
        <deny users="*"/>
        <allow roles="User"/>
            </authorization>
        </system.web>
    </location>
  <location path="Account_Employee.aspx">
    <system.web>
      <authorization>
        <deny users="*"/>
        <allow roles="User"/>
      </authorization>
    </system.web>
  </location>
  <location path="StoreManagement.aspx">
    <system.web>
      <authorization>
        <deny users="*"/>
        <allow roles="StoreManager"/>
      </authorization>
    </system.web>
  </location>
  <location path="ChainManagement.aspx">
    <system.web>
      <authorization>
        <deny users="*"/>
        <allow roles="ChainManager"/>
      </authorization>
    </system.web>
  </location>
  <location path="SystemAdmin.aspx">
    <system.web>
      <authorization>
        <deny users="*"/>
        <allow roles="XsiteInternalAdmin"/>
      </authorization>
    </system.web>
  </location>

Answer 1

It turns out that this is an issue when you’re using a horizontal
ASP.NET menu. You usually hide the root node of the sitemap file when
using a horizontal menu because a top row with one lonely root item
doesn’t make sense. (The SiteMapDataSource ShowStartingNode property
is set to False.)

The fix was to make sure that every role had access to the (unused)
dummy siteMapNode at the root by including roles=”*” in web.sitemap
shown below:

<?xml version="1.0" encoding="utf-8" ?>
<siteMap  enableLocalization="true"
     xmlns="http://schemas.microsoft.com/AspNet/SiteMap-File-1.0" >
    <siteMapNode url="" title="" roles="*"  description="">
      <siteMapNode url="~/default.aspx" resourceKey="siteMapHome" 
       title="Home" roles="admin,account" description="" />
<!-----More nodes-->

Here is main source.

For your code.

 <?xml version="1.0" encoding="utf-8" ?>
    <siteMap xmlns="http://schemas.microsoft.com/AspNet/SiteMap-File-1.0">
      <siteMapNode roles="*">
        <siteMapNode title="Home" roles="*" url="~/Default.aspx" />
        <siteMapNode title="About" roles="*" url="~/About.aspx" />
        <siteMapNode title="Suppliers" roles="*" url="~/Suppliers.aspx" />
        <siteMapNode title="Departments" roles="*" url="~/Departments.aspx" />
        <siteMapNode title="Management" roles="*">
          <siteMapNode title="Account" roles="*" url="~/Account_Employee.aspx" />
          <siteMapNode title="Store" roles="*" url="~/StoreManagement.aspx" />
          <siteMapNode title="Chain" roles="*" url="~/ChainManagement.aspx" />
          <siteMapNode title="System" roles="*" url="~/SystemAdmin.aspx" />
        </siteMapNode>
      </siteMapNode>
    </siteMap>