Changeset 9320

Timestamp:

01/08/2015 11:56:08 PM (11 years ago)

Author:

r-a-y

Message:

Members Admin: Set better access capabilities.

Props thomaslhotta.

Fixes #5932.

File:

• trunk/src/bp-members/bp-members-admin.php (modified) (3 diffs)

trunk/src/bp-members/bp-members-admin.php

@@ -106 +106 @@
 
         // Capability depends on config
-        $this->capability = bp_core_do_network_admin() ? 'manage_network_options' : 'manage_options';
+        $this->capability = bp_core_do_network_admin() ? 'manage_network_users' : 'edit_users';
 
         // The Edit Profile Screen id
@@ -145 +145 @@
         // When BuddyPress is not network activated, only Super Admin can moderate signups
         if ( ! empty( $this->subsite_activated ) ) {
-            $this->capability = 'manage_network_options';
+            $this->capability = 'manage_network_users';
         }
     }
@@ -1862 +1862 @@
      */
     public function signups_admin_manage( $action = '' ) {
-        if ( ! is_super_admin() || empty( $action ) ) {
+        if ( ! current_user_can( $this->capability ) || empty( $action ) ) {
             die( '-1' );
         }