We have users who uses both the Smart Client and the Web Shell. We found out that when you are in the Smart Client, the user have other additional roles than when they are in the Web Shell. This is a security issue and the Smart Client should mirror the Web Shell.