Changeset 7456

Timestamp:

10/22/2013 08:56:04 PM (11 years ago)

Author:

r-a-y

Message:

Fix trailing 'members' slug when non-admins view a spammer's profile.

If we're on a spammer's profile page, only users with the 'bp_moderate'
cap can view subpages on the spammer's profile.

Users without the cap trying to access a spammer's subnav page should be
redirected to the root of the spammer's profile page.

This commit does this by removing the component in the canonical stack
when a user without the 'bp_moderate' cap is on a spammer's profile page.

Fixes #5207.

File:

• trunk/bp-members/bp-members-loader.php (modified) (1 diff)

trunk/bp-members/bp-members-loader.php

@@ -138 +138 @@
                 unset( $bp->canonical_stack['component'] );
             }
+
+            // if we're on a spammer's profile page, only users with the 'bp_moderate' cap
+            // can view subpages on the spammer's profile
+            //
+            // users without the cap trying to access a spammer's subnav page will get
+            // redirected to the root of the spammer's profile page.  this occurs by
+            // by removing the component in the canonical stack.
+            if ( bp_is_user_spammer( bp_displayed_user_id() ) && ! bp_current_user_can( 'bp_moderate' ) ) {
+                unset( $bp->canonical_stack['component'] );
+            }
         }
     }