Changeset 8145

Timestamp:

03/19/2014 05:40:44 PM (11 years ago)

Author:

imath

Message:

Prevent a regular administrator to change the profile of a super administrator

In Multisite configs where BuddyPress is not network activated, we need to make sure a regular admin cannot edit the BuddyPress profile of a Super Admin.

props boonebgorges, imath

Fixes #5463

File:

• trunk/bp-members/bp-members-functions.php (modified) (1 diff)

trunk/bp-members/bp-members-functions.php

@@ -1169 +1169 @@
     if ( bp_is_my_profile() )
         return true;
+
+    if ( is_super_admin( bp_displayed_user_id() ) && ! is_super_admin() ) {
+        return false;
+    }
 
     if ( bp_current_user_can( 'bp_moderate' ) || current_user_can( 'edit_users' ) )