Changeset 12945 for trunk/src/bp-members/bp-members-filters.php

Timestamp:

05/10/2021 03:07:41 PM (3 years ago)

Author:

dcavins

Message:

Member Invites: Centralize access logic.

• User must be logged in to pass bp_members_send_invitation cap.
• Add new capabilities bp_members_invitations_view_screens

and bp_members_invitations_view_send_screen.

• Use new capabilities in bp_members_admin_bar_add_invitations_menu()

and bp_members_invitations_setup_nav() so that the logic is
consistent in both places.

See #8139.

File:

• trunk/src/bp-members/bp-members-filters.php (modified) (2 diffs)

trunk/src/bp-members/bp-members-filters.php

@@ -150 +150 @@
 
         case 'bp_members_send_invitation':
-            if ( bp_get_members_invitations_allowed() ) {
+            if ( is_user_logged_in() && bp_get_members_invitations_allowed() ) {
                 $retval = true;
             }
@@ -167 +167 @@
                 }
             }
+            break;
+
+        case 'bp_members_invitations_view_screens':
+            $retval = bp_get_members_invitations_allowed() && ( bp_user_can( $user_id, 'bp_members_send_invitation' ) || bp_members_invitations_user_has_sent_invites( $user_id ) );
+            break;
+
+        case 'bp_members_invitations_view_send_screen':
+            $retval = is_user_logged_in() && bp_get_members_invitations_allowed();
             break;
     }