Depends on whether you're developing for IE or Firefox. IE will let a developer deny the user access to controls, FF won't - especially if the user has specifically reconfigured FF to disallow invasive changes.

But if you design everything in a Flash object, even in FF the only thing you can do outside the dev's explicit design is resize the entire object.