Changeset 11220

Timestamp:

11/03/2016 08:33:35 AM (3 years ago)

Author:

djpaul

Message:

Core: grant the 'bp_xprofile_change_field_visibility' cap to logged-out users.

Fixes problem introduced in v2.7 where profile field visibilty options were not appearing on the registration form.
WordPress does not well handle capabilty checks for anonymous users, and it's likely we'll iterate on this technique in the future as we begin to fully adopt user capabilities.

Fixes #7298

File:

• trunk/src/bp-xprofile/bp-xprofile-caps.php (modified) (2 diffs)

trunk/src/bp-xprofile/bp-xprofile-caps.php

@@ -26 +26 @@
     switch ( $cap ) {
         case 'bp_xprofile_change_field_visibility' :
-            $caps = array( 'exist' ); // Must allow for logged-out users during registration.
+            $caps = array( 'exist' );
 
             // You may pass args manually: $field_id, $profile_user_id.
@@ -72 +72 @@
 }
 add_filter( 'bp_map_meta_caps', 'bp_xprofile_map_meta_caps', 10, 4 );
+
+/**
+ * Grant the 'bp_xprofile_change_field_visibility' cap to logged-out users.
+ *
+ * @since 2.7.1
+ *
+ * @param bool   $user_can
+ * @param int    $user_id
+ * @param string $capability
+ * @return bool
+ */
+function bp_xprofile_grant_bp_xprofile_change_field_visibility_for_logged_out_users( $user_can, $user_id, $capability ) {
+    if ( 'bp_xprofile_change_field_visibility' === $capability && 0 === $user_id ) {
+        $user_can = true;
+    }
+
+    return $user_can;
+}
+add_filter( 'bp_user_can', 'bp_xprofile_grant_bp_xprofile_change_field_visibility_for_logged_out_users', 10, 3 );