Milan is a true three-tier application. The end user capabilities are completely controlled though Milan Server.  The security provided by Milan Server means that in order for a user to take any action, they must be granted permission.