Changeset 12858

Timestamp:

03/16/2021 06:48:25 PM (6 years ago)

Author:

imath

Message:

Make sure a just demoted Admin cannot edit/delete/add BP types

(trunk)

File:

• trunk/src/bp-core/classes/class-bp-admin-types.php (modified) (1 diff)

trunk/src/bp-core/classes/class-bp-admin-types.php

@@ -147 +147 @@
         private function handle_action( $action ) {
                 $referer = wp_get_referer();
+
+                if ( ! bp_current_user_can( 'bp_moderate' ) ) {
+                        return;
+                }
 
                 // Adding a new type into the database.