`SN_MODULE_NOTIFY_ENABLED` must be replaced with `SN_MODULE_NOTIFY_LOADED` to get this work properly. The trick is, that module is not considered being loaded, when you have no permission to access it. But it is considered enabled. Because module is enabled, when it is enabled in the DB. But it is loaded only if it is enabled AND you have permission to access it. So use LOADED instead of ENABLED. And check your code before you push it, please.