Rolling Magic Attacks

[Killer Cyborg]

Read the "Save" part of the spell description.

[Damian Magecraft]

Read the "Save" part of the spell description.

Good advice...
Most saves in Pally are... all or nothing results.
Requiring a roll for accuracy is "gilding the lily."
There are however some spells that imply, if not outright state, that a roll to strike is required for that particular spell.

in short your friend is correct.
You as well are correct in certain cases.

[Damian Magecraft]

My general feeling towards the spells is if it's shot like firebolt or lightning arc there is a d20 roll for accuracy, however on spells like blinding flash or carpet of adheasion where it's more AoE would be a save vs magic. Leaving the rolls most up to what the spell does when it's cast

Firebolt is one of those "special" cases I mentioned earlier, in its description it plainly states the bolt gets a bonus to strike. This very firmly implies that a roll to strike is required to hit said target.
Lightning Arc is yet another of those "special" case spells. In its description it plainly spells out that bonuses to strike granted when the arc is used. Arc also sets the caster with a number of "charges" or attacks they may use for the duration of the spell. Again a strike roll is strongly implied here.
CoA and Blinding Flash on the other hand would not require a strike roll.
(unless the wizard in question has "special" circumstances placed upon them by either the Player or the GM or both during creation... but that is a House rule.)

Fire Ball is one of those spells one would think requires a strike roll but one would be incorrect. It states quite clearly in the description that the FB is magically directed and seldom misses.