Helena Edelson wrote:
> Is there any way using sitemap  to manage user roles
> via a  login to control roles
> access to app pages for user_role_a
> disallow access for user_role_b type of thing?
> 
> anyone done this?

Use the capablities of the HTTPD server.

If using forrest in static mode then .htaccess etc.

If using forrest in webapp mode then .htaccess
and ProxyPass
http://wiki.apache.org/cocoon/ApacheModProxy

Alternatively use the capabilities of the servlet
container as someone already suggested.

-David