Render server controls only if user has permission