Changeset 5462

Timestamp:

12/08/2011 03:30:42 AM (13 years ago)

Author:

boonebgorges

Message:

When a non-admin of a group attempts to visit a group admin tab, redirect with bp_core_no_access() rather than 404. Fixes #3694

File:

• trunk/bp-groups/bp-groups-loader.php (modified) (1 diff)

trunk/bp-groups/bp-groups-loader.php

@@ -197 +197 @@
                 }
             }
+            
+            // Protect the admin tab from non-admins
+            if ( bp_is_current_action( 'admin' ) && !bp_is_item_admin() ) {
+                bp_core_no_access( array(
+                    'message'  => __( 'You are not an admin of this group.', 'buddypress' ),
+                    'root'     => bp_get_group_permalink( $bp->groups->current_group ),
+                    'redirect' => false
+                ) );
+            }
         }