Q? about Permissions & Preferences

timfire

In an extension, let's say we have a role-based permission, "Can View Images".
We then have a user preference, "View Images".
Let's say there's a user with the appropriate role, and they activate the preference "View Images". Now they can view images.

Then, let's say the user's role is changed to one that can't view images.

The preference stays in the user's preference array, right? So if the extension code just says "if (user has preference)...", would the user still be able to view images, even though their role has changed?
_________

What I'm trying to get at is: If I have a role (permission) & preference based feature, can I get away with just checking for user preference, or should I be checking for permissions & preference?

Thanks!

Minisweeper

I'd check for both.

mattucf

You should be able to use the PreRoleChangeNotification delegate of UserManager if you want to clean out that preference after the role change. It might be more trouble than it's worth, though.