Django and react access control over REST
I am new to react and webservices, I have a Django+DRF+react project. I am using one of react open source FW( not naming it because this is a theoretical question ). this FW gives you an access control API so you can implement your own.
as for my little understanding, django manages access pretty well,
So I managed hook up the FW access control with my DRF, which request for a permission based resource and user action and I am getting the response and its all working well(I think).
just to make sure we are all on the same page, I am talking about restricting the react UI side, my DRF already managing the permissions of the data on the backend. but just so user wont even be able to see a button referencing an area out of there permission.
the issue is the hit on the server, there are many calls per page and I, with my very little knowledge in this field, I'm not sure is this OK ? is this conventional ? does implementing such access control which requires API call is normal procedure ?