Shop system (theory) advice

Options
using pun/photon cloud

what is the best way to go about this?
store purchased items in our database
retrieve the items the player purchases to string array (key/value pair) on authentication.

^ let the player select which skins or items to use.

^ in the function joining the room check the key/value pair(is this stored for every user? or dumped after authenticate) again to make sure the player owns that item.

is this the best way to go about this?