I was pondering earlier whether it would make sense to just fire this in e.g. User.logged_in so that it’s refreshed on login, but without delving into it it probably makes sense to trigger this:
- in the UserEmail controller when a user’s (verified) email address is updated
- when the autogroup rules change