# Discourse user role check

**URL:** https://meta.discourse.org/t/discourse-user-role-check/241637
**Category:** Development
**Created:** [October 12, 2022, 12:49am UTC](https://meta.discourse.org/t/discourse-user-role-check/241637 "2022-10-12T00:49:32Z")
**Posts on this page:** 1
**Page:** 1

<div class="post-metadata">

### Author: ![0x\_pp](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/0x_pp/32/274081_2.png) [@0x\_pp](https://meta.discourse.org/u/0x_pp)
#### Post date: [October 12, 2022, 12:49am UTC](https://meta.discourse.org/t/discourse-user-role-check/241637/1 "2022-10-12T00:49:32Z")

</div>

I’m using discourse unlock plugin to add hodlers to dedicated group so that they could check private posts.

Here’s the workflow for tricky users

1. A user buys some token for authentication
2. The user added to dedicated group and can read private posts
3. The user immediately sells token
4. Even though the user sold token, he could still able to check private post

To resolve this issue, I think we should have a feature to flush users’ group  
Here’s the plugin I used  
[https://github.com/discourse/discourse-unlock](https://github.com/discourse/discourse-unlock)