not sure exactly how the solution is built but I think scoping should be the basic answer, In that case even if a user asked for certain access they shouldn't be able to the system will prevent to provide it in lack of access.
Depends on implementation, you can always add another layer like PX, Identity policy, event listener to make sure no one abuses the screen to try and get something they shouldn't have.