Changeset 13795

Timestamp:

04/13/2024 08:20:06 AM (6 months ago)

Author:

imath

Message:

Make sure only Community Admins can assign member types

Props vapvarun

Fixes #9097
Closes ​https://github.com/buddypress/buddypress/pull/270

File:

• trunk/src/bp-members/classes/class-bp-members-admin.php (modified) (3 diffs)

trunk/src/bp-members/classes/class-bp-members-admin.php

@@ -1492 +1492 @@
         $current_type = (array) bp_get_member_type( $user->ID, false );
         $types_count  = count( array_filter( $current_type ) );
+        $disabled     = ! bp_current_user_can( 'edit_users' ) && ! bp_current_user_can( 'bp_moderate' );
         ?>
 
@@ -1504 +1505 @@
                 <li>
                     <label class="selectit">
-                        <input value="<?php echo esc_attr( $type->name ) ?>" name="bp-members-profile-member-type[]" type="checkbox" <?php checked( true, in_array( $type->name, $current_type ) ); ?>>
+                        <input value="<?php echo esc_attr( $type->name ) ?>" name="bp-members-profile-member-type[]" type="checkbox" <?php checked( true, in_array( $type->name, $current_type ) ); ?> <?php disabled( $disabled ); ?>>
                         <?php echo esc_html( $type->labels['singular_name'] ); ?>
                     </label>
@@ -1531 +1532 @@
 
         // Permission check.
-        if ( ! bp_current_user_can( 'edit_users' ) && ! bp_current_user_can( 'bp_moderate' ) && $user_id != bp_loggedin_user_id() ) {
+        if ( ! bp_current_user_can( 'edit_users' ) && ! bp_current_user_can( 'bp_moderate' ) ) {
             return;
         }