19-09-2008, 12:35 PM
Personally I would leave them client side.
If you do the proper checks server side it wouldn't matter what they have access to on the client.
If you do the proper checks server side it wouldn't matter what they have access to on the client.