This functionality ultimately relies on what is returned from the server, however it would be a good idea to consider this in terms of the client and figure out how to disable certain elements from running and or loading, and then make sure that there isn't any client manipulation that can occur to get them running. Require checks in the front end and the back end.