AJAX frame architectural photography

I think the so-called permissions you want to achieve should be, as long as the user clicks on a node, query whether it has the permissions of that node, right? If you have permission, display the contents that you have permission to operate; if not, you will be prompted that you have no permission. I don't know if I understand correctly.

Or in another case, which menus the currently logged-in user has permission to, only the menus for which he has permission will be displayed in the tree diagram.

The former needs to be judged by ajax to the database. Of course, if the requirement for not refreshing is not high, you can jump directly to the database to judge. The latter judges the authority when outputting the tree diagram, and does not need to judge later.