Welcome Guest, Not a member yet? Register   Sign In
help with role based authentication

Both techniques should be used. Do not show people buttons there not supposed to use because they will try them, even if it is just to see what it does. But you should also throw an error on the page because you can alway dummy up a post that simulates clicking the button with some common tools from the internet.

Don't show the button, and inside the controller check if the user can access this page.

Theme © iAndrew 2016 - Forum software by © MyBB