FrontendHaltSecurity·Intermediate·Conceptual·1 min read
What is the frontend's role in authorization?
Short interview answer
The UI may hide unavailable actions for usability, but the server must authorize every sensitive request using trusted identity and resource context. Client route guards, disabled buttons, and hidden fields are not security boundaries.
Key takeaway
Explain the underlying mental model clearly, then support it with a concrete example and its trade-offs.