There is no recipe for making a decision. A few notes:
- security and validation should always be present on the server side (sometimes duplicated on the client).
- the client side should contain only UI logic. No business logic.
- logically, everything that accesses the database must be on the server.
, RIA ( -), . .