Lock creative tabs and items per group of players from an in-game admin screen. The server enforces every rule, whatever the client runs.