You often need to check in your client script if the current user has a special security role, for instance in a custom rule as part of a ribbon enable rule.