Changeset 8681

Timestamp:

07/23/2014 07:27:19 PM (10 years ago)

Author:

r-a-y

Message:

When deleting a group in the Groups dashboard, use bp_current_user_can().

The groups admin frontend also uses bp_current_user_can() to determine
whether a user can delete a group. Thus, this commit mirrors this
capability check in the Groups admin dashboard.

Fixes #5348.

File:

• trunk/src/bp-groups/bp-groups-admin.php (modified) (1 diff)

trunk/src/bp-groups/bp-groups-admin.php

@@ -561 +561 @@
 function bp_groups_admin_delete() {
 
-    if ( ! is_super_admin() )
+    if ( ! bp_current_user_can( 'bp_moderate' ) ) {
         die( '-1' );
+    }
 
     $group_ids = isset( $_REQUEST['gid'] ) ? $_REQUEST['gid'] : 0;