Enable or disable button on a ribbon based on user permissions in SharePoint 2010

Question

Hi,
I have requirement to find a way to disable Inheritance, Add and Modify group from permission tab for users who are not added into specific group e.g. Administrators
I have followed the following article to create a feature but have encountered few issues:
http://msdn.microsoft.com/en-us/library/ff408060.aspx
Issues:
I used the above code as a sample to create a feature and test if it would work. It worked fine but even though i have replaced Location="Ribbon.Library.Actions.ConnectToClient" with my permission locations,
Connect to Outlook button still doesn't appear when the feature is activated. If i deactive this feature it shows
Connect to Outlook button even though there is no reference for this in the code!
I have modified the Elements.XML and have added the following code but it still disables the buttons for a user who has Site Collection Administrator permissions, i just want to disable this for users who are in particular group:
<?xml version="1.0" encoding="utf-8"?>
<Elements xmlns="http://schemas.microsoft.com/sharepoint/">
<CustomAction
Id="RemoveRibbonButton"
Location="CommandUI.Ribbon"
RequireSiteAdministrator = "TRUE"
>
<CommandUIExtension>
<CommandUIDefinitions>
<CommandUIDefinition
Location="Ribbon.Permission.Modify" />
</CommandUIDefinitions>
</CommandUIExtension>
</CustomAction>
<CustomAction
Id="RemoveRibbonButton"
Location="CommandUI.Ribbon"
RequireSiteAdministrator = "TRUE"
>
<CommandUIExtension>
<CommandUIDefinitions>
<CommandUIDefinition
Location="Ribbon.Permission.Add" />
</CommandUIDefinitions>
</CommandUIExtension>
</CustomAction>
</Elements>
I have also have another issue when this feature is activated even though i haven't removed 'Check' and 'Manage' Ribbon locations, they are also greyed out as shown it the screenshot below:
I have also created a user control using the following method:
http://sharepointroot.com/2010/06/18/remove-actions-from-the-ribbon-sharepoint-2010/
But again i need to restrict it specific user group.
Any advice how to do this? or which way is better creating a feature or creating a user control? even though i liked the creating the feature as it gives your more control.
Regards,
Kashif

Answer 1

Thanks for your reply Paul.
I do understand that this is a partial solution and wouldn't stop them completely from doing these actions using different UI but atleast it would remove these options from the ribbon which is causing us some major issues when clicked by mistake especially
'inherit permissions'.
We do have governance policies in place and a certain user group can add and remove users from SP site. But the issue we have currently is that when one of these (authorised) users uses 'inherit permissions from parent' site. This removes the unique
permissions from the subsite and delete all SP groups / permission level in the subsite. In some cases subsite contains confidential information which is then exposed to all the users who have access to the parent site.
The main button which i'm interested to disable is 'Inherit Permissions' which i believe can't be used from anyother UI apart from the ribbon.
I just need to know if it's possible to restrict this for some users or group? even if it just removes it from the ribbon only i would be still interested to explore this implementation.
Any help would be apperciated.
Regards,
Kashif