You need to generate Menu according to the permissions from Server End.
Create roles at server end, Assign users those roles, Assign Menu items accessible to those roles.
Now whenever, user logs in check his role and load menu items tagged to that role.
As extra layer of security, validate every client request against his roles as user may try to access other links not assigned to his role.