i have the same problem, i cannot figure out how IsInRole knows what role the user belongs to. I see in the xml file the accessrole is set by the current tab, so that tells you what roles are allowed to access that page but how does the site know what role a user belongs to?