SiteMap config vs. Web.config in page security right definition

We all know that both web.config and Sitemap can control the access right for specific web page. But what is the different?  

web.config define:

<location path="QuickCheck/XXX.aspx">
    <system.web>
      <authorization>
        <deny roles="Admin,Viewer,User"/>
      </authorization>
    </system.web>
  </location>

Sitemap define:

 <siteMapNode title="OnVehicle" url="QuickCheck/XXX.aspx" roles="Viewer"/>

Sitemap control the menu which link to sitemap, whether display' link' to page on menu base on ROLE

Web.config control the menu, whether able to access/open real page base on ROLE

In our cases which means we can see QuickCheck/XXX.aspx in menu but we cannot access it.

Other Reference:

http://geekswithblogs.net/azamsharp/archive/2006/05/02/77018.aspx