Adding client-side enforcement for access levels