It's decent code you can use on connect instead of on join, and there's no need to stop a trigger just check if they don't have the permission.