---
title: "Discussion on \"Hiding the Button Isn't Authorization: Why You Must Gate the Request\" | Hashnode"
description: "Discussion on \"Hiding the Button Isn't Authorization: Why You Must Gate the Request\". Hiding a UI button doesn't stop the API request behind it. Learn the three-gate model for frontend authorization: render, fetch, and backend."
url: "https://hashnode.com/posts/hiding-the-button-isn-t-authorization-why-you-must-gate-the-request/6a493327019170aeb3d52291"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [Hiding the Button Isn't Authorization: Why You Must Gate the Request](https://emeka-nwosa.hashnode.dev/hiding-the-button-isn-t-authorization-why-you-must-gate-the-request?utm_source=hashnode&utm_medium=feed)

Hiding a UI button doesn't stop the API request behind it. Learn the three-gate model for frontend authorization: render, fetch, and backend.

Jul 4 · 3 min read · emeka-nwosa.hashnode.dev  
Read the article

-   [#frontend-authorization](https://hashnode.com/tag/frontend-authorization)
-   [#react-query](https://hashnode.com/tag/react-query)
-   [#tanstack-query](https://hashnode.com/tag/tanstack-query)
-   [#api-security](https://hashnode.com/tag/api-security)
-   [#rbac-frontend](https://hashnode.com/tag/rbac-frontend)
-   [#web-security](https://hashnode.com/tag/web-security)
-   [#authorization-patterns](https://hashnode.com/tag/authorization-patterns)

## Written by

[Emeka Afamefuna Nwosa](https://hashnode.com/@gaffer22)

@gaffer22 · Lagos, Nigeria

  
[View profile](https://hashnode.com/@gaffer22)

Engineering notes from the things I actually shipped."

Software engineer who ships, breaks, and documents. I write the notes I wish I'd had open in the other tab.

## Responses

Markdown supported · ⌘↵ to post

No responses yet.