Suppose I have a plugin that communicates with a remote server. Furthermore, I'm a server administrator that would like certain components of the plugin to enable/disable dynamically. Depending on the permissions of the plugin user, that user may only access various components. The user may be a root user, admin user, regular user, etc. User permissions and accessibility are defined in my server - say in a MySQL database. Is there a set of best practices for defining such permissions and retrieving them in a client-side plugin?