Discourse user role check

I’m using discourse unlock plugin to add hodlers to dedicated group so that they could check private posts.

Here’s the workflow for tricky users

  1. A user buys some token for authentication
  2. The user added to dedicated group and can read private posts
  3. The user immediately sells token
  4. Even though the user sold token, he could still able to check private post

To resolve this issue, I think we should have a feature to flush users’ group
Here’s the plugin I used