Technically, yes. But I would urge you not to check user_access() during such an operation. Doing so can break automated calls to node hooks.
See Dave Cohen's bug report last week regarding comment form submission. It's related. Better to set a conditional form value to pass to your operation. (And this can be access-based.) Then only act if it is present.
