I got dinged in a Security Review for not checking the CRUD settings for some code that inserts a record into a Chatter Group. The Group Id is stored in a Custom Setting, but the organization could set up the group to be Private, and not add the user to the group, at which point the code would fail.
But in the response, they suggested something like this:
isCreateable = Schema.sObjectType.FeedItem.isCreateable();
But am I right in thinking that doesn't make sense for a Chatter Group? I believe I have to confirm that that the user is a member of the group, and if they are, they will be able to post to the group? Just want to be sure before I submit it again...