Changeset 5462

Timestamp:

12/08/2011 03:30:42 AM (15 years ago)

Author:

boonebgorges

Message:

When a non-admin of a group attempts to visit a group admin tab, redirect with bp_core_no_access() rather than 404. Fixes #3694

File:

• trunk/bp-groups/bp-groups-loader.php (modified) (1 diff)

trunk/bp-groups/bp-groups-loader.php

@@ -197 +197 @@
                                 }
                         }
+                        
+                        // Protect the admin tab from non-admins
+                        if ( bp_is_current_action( 'admin' ) && !bp_is_item_admin() ) {
+                                bp_core_no_access( array(
+                                        'message'  => __( 'You are not an admin of this group.', 'buddypress' ),
+                                        'root'     => bp_get_group_permalink( $bp->groups->current_group ),
+                                        'redirect' => false
+                                ) );
+                        }
                 }