You can change the contents of tables in the BE if you have access to the tables in the BE for viewing (as, for example, viewing the list in the Combo Box that is driven from a BE table.)
Since you are on a 2013 version, you no longer have per-user table access controls (i.e. individual user selective access). That went away when MDAC was determined to be a security morass that was better avoided. (P.S. I'm not the one who decided it was a steaming hot mess!)
The back-end, wherever it resides, by definition resides on a server even if it is actually just on someone else's machine in a peer-to-peer network with no domain controller. Remember that native Access BE files are just FILES that are accessed via Windows File Sharing, or Server Message Block (SMB) protocol. Now, if the BE is an SQL Server, MySQL server, or some other SQL engine, then it is entirely a different protocol, and in THAT case you could definitely say the BE was on a server.
The situation you describe is exactly why you need to define a separate development/test environment with its own separate BE. You would then be able to fully test new features on a COPY of the live BE. Your test DB would be a copy of the design-master DB. You never convert the design-master to an ACCDE or MDE or whatever flavor of xDE that is appropriate to your version of Access. Instead, you make a prime (and pristine) copy of that file, which you put in a shared area where your users can download a new copy when appropriate. Then offer physical mayhem, maiming, and mauling to anyone who DARES to muck with your pristine public copy. (Which is why you have a second copy of same in an area where no one can easily get to it.)
Before you say .... but my live BE is an SQL Server and I can't make a second instance of the database on it for testing... just remember that you don't have to. You can make an Access BE on your test system and just link to the "real live" BE when promoting your tested version to become the next pristine version.
I also have fixed it so that my "live" system knows (from the CurrentDatabase.Name property and the Environ("ComputerName") call and a couple of other tests) whether it is on the "live" system. If it is, it refuses to run and will exit immediately. Of course, I have disabled the special keys that would allow users to easily bypass that checking.