I've been looking at the code surrounding security, and I'm wondering why the userCan hook isn't called from isAllowed since most of the calls made to determine whether an action can be performed call userCan, yet all of them call isAllowed. Even if userCan is best where it is, wouldn't it be a good idea to have an isAllowed hook?

Version: unspecified
Severity: enhancement