Changeset 7456

Timestamp:

10/22/2013 08:56:04 PM (13 years ago)

Author:

r-a-y

Message:

Fix trailing 'members' slug when non-admins view a spammer's profile.

If we're on a spammer's profile page, only users with the 'bp_moderate'
cap can view subpages on the spammer's profile.

Users without the cap trying to access a spammer's subnav page should be
redirected to the root of the spammer's profile page.

This commit does this by removing the component in the canonical stack
when a user without the 'bp_moderate' cap is on a spammer's profile page.

Fixes #5207.

File:

• trunk/bp-members/bp-members-loader.php (modified) (1 diff)

trunk/bp-members/bp-members-loader.php

@@ -138 +138 @@
                                 unset( $bp->canonical_stack['component'] );
                         }
+
+                        // if we're on a spammer's profile page, only users with the 'bp_moderate' cap
+                        // can view subpages on the spammer's profile
+                        //
+                        // users without the cap trying to access a spammer's subnav page will get
+                        // redirected to the root of the spammer's profile page.  this occurs by
+                        // by removing the component in the canonical stack.
+                        if ( bp_is_user_spammer( bp_displayed_user_id() ) && ! bp_current_user_can( 'bp_moderate' ) ) {
+                                unset( $bp->canonical_stack['component'] );
+                        }
                 }
         }