only logged in users for example should be able to do stuff with sockets.io you could change the js and do anything