Changeset 12945 for trunk/src/bp-members/bp-members-filters.php

Timestamp:

05/10/2021 03:07:41 PM (5 years ago)

Author:

dcavins

Message:

Member Invites: Centralize access logic.

• User must be logged in to pass bp_members_send_invitation cap.
• Add new capabilities bp_members_invitations_view_screens

and bp_members_invitations_view_send_screen.

• Use new capabilities in bp_members_admin_bar_add_invitations_menu()

and bp_members_invitations_setup_nav() so that the logic is
consistent in both places.

See #8139.

File:

• trunk/src/bp-members/bp-members-filters.php (modified) (2 diffs)

trunk/src/bp-members/bp-members-filters.php

@@ -150 +150 @@
 
                 case 'bp_members_send_invitation':
-                        if ( bp_get_members_invitations_allowed() ) {
+                        if ( is_user_logged_in() && bp_get_members_invitations_allowed() ) {
                                 $retval = true;
                         }
@@ -167 +167 @@
                                 }
                         }
+                        break;
+
+                case 'bp_members_invitations_view_screens':
+                        $retval = bp_get_members_invitations_allowed() && ( bp_user_can( $user_id, 'bp_members_send_invitation' ) || bp_members_invitations_user_has_sent_invites( $user_id ) );
+                        break;
+
+                case 'bp_members_invitations_view_send_screen':
+                        $retval = is_user_logged_in() && bp_get_members_invitations_allowed();
                         break;
         }