Forms Security for Role base security. Nirdesh Puri

Hi,

I am using IBuySpy portal framwork and using Role based security. But I got some security problem in this type of security.

Can you solve my problem.

Role base security: 

Role is based on Task Group and Task Group based on Task and Task based on pages url.

Create Two different roles: A and B

Create one user User1

User1 assign role A

if User1 login on site and get the menu of Role A. But any how he get the url of Role B page. How we prevent Role B pages from this user.

Warm Regards,

Nirdesh Puri