Changeset 12858

Timestamp:

03/16/2021 06:48:25 PM (4 years ago)

Author:

imath

Message:

Make sure a just demoted Admin cannot edit/delete/add BP types

(trunk)

File:

• trunk/src/bp-core/classes/class-bp-admin-types.php (modified) (1 diff)

trunk/src/bp-core/classes/class-bp-admin-types.php

@@ -147 +147 @@
     private function handle_action( $action ) {
         $referer = wp_get_referer();
+
+        if ( ! bp_current_user_can( 'bp_moderate' ) ) {
+            return;
+        }
 
         // Adding a new type into the database.