Our managed package contains a trigger that gets executed every time a Lead is updated or inserted. We want to allow our users to disable this trigger based on some custom setting in the managed package. Unfortunately there is no way to completely disable the trigger with APEX code so we check a custom setting every time the trigger is executed.
Unfortunately this trigger sometimes gets executed by users in the organization who do not have a license for using the package and it seems like they cannot access the custom settings, does that sound right?
How can I still prevent these users from executing the trigger?