Client-side checks

Ship-it Friday

It's Friday, 4:58 PM. Your admin panel check is client-side and the AI says it's fine:

// app.js (runs in the browser)
if (user.role === "admin") {
  showAdminPanel();
}