manni ma wrote:One way is to have an XML file containing role information. Onload of a page you can write javascript function to parse an XML file and create menus at runtime.
Umm, no. Bad idea. JavaScript can be disabled or spoofed easily. This is the sort of thing that needs to be done on the server.