BP Group Extension Access Bug

[travel-junkie]

When you handtype in an url to an edit page, that has been created using the extension API, then you get access to that page even though you’re logged out.

Here's the fix. In bp-groups-classes.php around line 1026, just add

if ( !$bp->is_item_admin )
    return false;

right after this line:

if ( $this->enable_edit_item ) {

[johnjamesjacoby]

(In [3205]) Fixes #2592 props travel-junkie