I am idealizing a personal project and I am doubtful about best practices.
For a web-based system with access control, which of the following do you think is the most ideal?
1 - Mount a static menu, with all the options already created, read the user access information of the bank, send to the form in the first access and hide the menus that the same does not have access?
2 - Leave an isolated holder for the menu, read in the database the menus that the user has access and then mount the access structure and return in the holder ?
Of course these are the ideas I had, possibly not the best or the most correct ones. If so, could anyone tell me a good alternative? Some sources of features / examples will also be welcome.
Thank you!