Changeset 11776 for trunk/src/bp-templates/bp-legacy/buddypress-functions.php

Timestamp:

12/14/2017 01:24:01 PM (9 years ago)

Author:

dcavins

Message:

Use bp_user_can for group-related permissions.

Centralize and de-duplicate permissions checks for group-related functions, like checking whether a user can join a group or send invitations from a group.

Props dcavins, djpaul.

Fixes #7610.

File:

• trunk/src/bp-templates/bp-legacy/buddypress-functions.php (modified) (3 diffs)

trunk/src/bp-templates/bp-legacy/buddypress-functions.php

@@ -1493 +1493 @@
 
         if ( ! groups_is_user_member( bp_loggedin_user_id(), $group->id ) ) {
-                if ( 'public' == $group->status ) {
+                if ( bp_current_user_can( 'groups_join_group', array( 'group_id' => $group->id ) ) ) {
                         check_ajax_referer( 'groups_join_group' );
 
@@ -1502 +1502 @@
                         }
 
-                } elseif ( 'private' == $group->status ) {
+                } elseif ( bp_current_user_can( 'groups_request_membership', array( 'group_id' => $group->id ) ) ) {
 
                         // If the user has already been invited, then this is
@@ -1532 +1532 @@
                 if ( ! groups_leave_group( $group->id ) ) {
                         _e( 'Error leaving group', 'buddypress' );
-                } elseif ( 'public' == $group->status ) {
+                } elseif ( bp_current_user_can( 'groups_join_group', array( 'group_id' => $group->id ) ) ) {
                         echo '<a id="group-' . esc_attr( $group->id ) . '" class="group-button join-group" rel="join" href="' . wp_nonce_url( bp_get_group_permalink( $group ) . 'join', 'groups_join_group' ) . '">' . __( 'Join Group', 'buddypress' ) . '</a>';
-                } elseif ( 'private' == $group->status ) {
+                } elseif ( bp_current_user_can( 'groups_request_membership', array( 'group_id' => $group->id ) ) ) {
                         echo '<a id="group-' . esc_attr( $group->id ) . '" class="group-button request-membership" rel="join" href="' . wp_nonce_url( bp_get_group_permalink( $group ) . 'request-membership', 'groups_request_membership' ) . '">' . __( 'Request Membership', 'buddypress' ) . '</a>';
                 }