Changeset 13334

Timestamp:

10/02/2022 03:42:03 PM (2 years ago)

Author:

imath

Message:

Make sure the Available BP Tools card is only showed to Administrators

This card informs about the available BuddyPress tools into the wp-admin/tools.php page. As this page can be accessed by Contributors, Authors and Editors, we need a bp_moderate capability check before inserting this card.

Fixes #8747

File:

• trunk/src/bp-core/classes/class-bp-admin.php (modified) (1 diff)

trunk/src/bp-core/classes/class-bp-admin.php

@@ -184 +184 @@
         add_action( 'admin_bar_menu', array( $this, 'admin_bar_about_link' ), 100 );
 
-        // Add a description of new BuddyPress tools in the available tools page.
-        add_action( 'tool_box',            'bp_core_admin_available_tools_intro' );
-        add_action( 'bp_network_tool_box', 'bp_core_admin_available_tools_intro' );
+        // Add a description of BuddyPress tools in the available tools page.
+        if ( bp_current_user_can( 'bp_moderate' ) ) {
+            add_action( 'tool_box',            'bp_core_admin_available_tools_intro' );
+            add_action( 'bp_network_tool_box', 'bp_core_admin_available_tools_intro' );
+        }
 
         // On non-multisite, catch.