title: How should I determine which menuitems to show on my ASP MVC project that consumes an ASP API
body: <p>In my new project I need a REST-service that will contain all the logic and data of the system. For now we need a website and a desktop application to consume this service and later more can be added.</p>
  
  <p>The website, desktop-applications and others should just be 'interfaces' for the service.</p>
  
  <p>The project will contain a few roles that can perform certain actions.</p>
  
  <p>My question:
  How should I go about determining which menuitems should be visible to a logged-in user?
  In my website (ASP.NET MVC) I can login and the service gives me a token I can use to (try and) access resources.
  But trying to access a resource will only tell me if I can access it after the request(200 or 403).
  So how would I prevent users from seeing menuitems that they cannot access anyway?</p>