Smooth Sync position/rotation is managed by whoever is the owner. This can be either a server or a client.
If you want to validate positions and rotations on the server of client owned objects before applying them locally on the server or sending them out to other clients, you can edit the engine plugin and add your logic inside of the built in _Validate methods for the RPCs in SmoothSync.cpp