Accounts with ”blocked” or ”inactive” roles are still active/accessible

[pjnu]

I’m trying to temporarily disable a user account temporarily but that simply isn’t happening. When I go to wp-admin/ms-users.php , click Edit, and select Blocked or Inactive, the user is still able to freely login.

If this is true, the only way I can block access is to delete the account. Can someone help me fix this weird issue? Thanks.

Discussion thread: http://buddypress.org/community/groups/how-to-and-troubleshooting/forum/topic/accounts-with-blocked-or-inactive-roles-are-still-able-to-be-accessed/

[DJPaul]

If you disable BuddyPress, does the problem go away?

[r-a-y]

The problem appears to come from bbPress as the roles "blocked" and "inactive" do not exist natively in Wordpress, they are from bbPress.

The forum bridge code in bp-forums-bbpress.php has something to do with this.

---

Also, single WP doesn't have a native way to set users to spam in the WP admin dashboard unless you use multisite. Sounds like single WP should also offer similar functionality for this.

[r-a-y]

WP roles appear to be saved in the wp_options table under the "wp_user_roles" option_name.

The bbPress roles are not removed when BuddyPress is deactivated.

[DJPaul]

Thanks for investigating. This is a bit messy because if it's an existing (external) bbPress install, and BuddyPress removes those roles, we would break stuff in bbPress. Maybe BuddyPress can update the roles when the forums component is deactivated and bbPress had been installed by BuddyPress.

[r-a-y]

Sounds like a plan!

[DJPaul]

I'm taking this out of scope for 1.3 as it's a tricky problem and upon further consideration, I can't think of a foolproof way of doing this. Need some more input from jjj.

[DJPaul]

(This issue should clear itself as people migrate to the bbPress plugin)

[chrisclayton]

I believe this gets resolved in 1.6 with the capabilities page. (can't find related ticket).

[r-a-y]

Another bbPress 2 takeover ticket!