You can put permission information in localStorage, but the user can easily see and edit it. Is there a better way to do this? Throwing a request to the server\'s permission