Changeset 12938

Timestamp:

04/29/2021 05:52:32 PM (5 years ago)

Author:

dcavins

Message:

Member Invites: Change permissions check in bulk management.

In bp_members_invitations_action_bulk_manage(),
only continue if the current user is managing his own
invitations or is a site admin.

Props imath.

Fixes #8139.

File:

• trunk/src/bp-members/actions/invitations-bulk-manage.php (modified) (1 diff)

trunk/src/bp-members/actions/invitations-bulk-manage.php

@@ -18 +18 @@
 
         // Bail if not the user's invitations screen.
-        if ( ! bp_is_user_members_invitations() ) {
+        if ( ! bp_is_my_profile() && ! bp_current_user_can( 'bp_moderate' ) ) {
                 return false;
         }