A method of controlling access to a client over a computer network includes associating a user interface element with at least one tag and defining an access permission rule for a client, as a function of one or more tags, the function including at least one OR, NOT or inequality condition. The method further includes receiving a request of the client to access the user interface element and allowing the client to access the user interface element only if the tags of the user interface element meet the condition of the access permission rule.