Thanks for the reply.

Luckily the information we are displaying for the users is not private data. We are just hiding the data to organize the screen with collapsible panels or based on security level they cannot see some information, but it isn't private data that would relate to data theft.

I'm more concerned about us using AJAX calls to save data and someone manipulating the data and then posting the information back...

Our application uses JavaScript to show/hide buttons and div's that provide information for a user based on their security level. Their level is determined from a database query that is done in either .NET code behind or a web service.

Our concern is that a hacker could modify the JavaScript on their local machine to give them additional security or view additional information. Right now, the application only works with IE, but it...