You should never-ever right code that says...
if (user_is_authenticated user) {...}
...you should only ever check specific capabilities.
if (user_is_authenticated user) {...}
...you should only ever check specific capabilities.