What functionality does component security disable

When utilizing security, I have a button that a user does not have the required role for and the button is set as disabled. In runtime, the button does appear disabled.

If I then press it, the event handler for mouse released still gets called even though the user doesn’t have security clearance and the button is disabled on the screen indicating that they don’t have the clearance.

Do I have to check their permissions in the event handler scripting to determine permissions before executing the code? If so, what functionality is the security supposed to disable when the ‘disable’ or ‘invisible’ for that matter are selected or does that just impact the appearance of the button?

Version 7.3

It disables the actionPerformed event. If you are doing things keyed off mouse events you need to manually check security before continuing.