Changeset 12938

Timestamp:

04/29/2021 05:52:32 PM (3 years ago)

Author:

dcavins

Message:

Member Invites: Change permissions check in bulk management.

In bp_members_invitations_action_bulk_manage(),
only continue if the current user is managing his own
invitations or is a site admin.

Props imath.

Fixes #8139.

File:

• trunk/src/bp-members/actions/invitations-bulk-manage.php (modified) (1 diff)

trunk/src/bp-members/actions/invitations-bulk-manage.php

@@ -18 +18 @@
 
     // Bail if not the user's invitations screen.
-    if ( ! bp_is_user_members_invitations() ) {
+    if ( ! bp_is_my_profile() && ! bp_current_user_can( 'bp_moderate' ) ) {
         return false;
     }