Skip to:
Content

BuddyPress.org

Opened 14 years ago

Closed 14 years ago

#4147 closed defect (bug) (no action required)

Can change other members profile pictures

Reported by: adolfius Owned by:
Priority: normal Milestone:
Component: Members Version: 1.5.4
Severity: normal Keywords: reporter-feedback
Cc:

Description

Hi there,

I am using BP 1.5.4. By going to someone elses profile, then appending the URL with /profile/change-avatar/ I can change their avatar. I initially thought it would just change mine. But no, I can change other members.

Thanks!

Josh Dean

Change History (2)

#1 @r-a-y
14 years ago

  • Keywords reporter-feedback added; needs-patch removed

Hi Josh, are you the super administrator for the site? If so, you are able to edit any member's avatar.

A regular user should not be able to edit another member's avatar. I just tested this locally and this works as expected.

Can you let us know if you are the admin of the site or a regular user?

#2 @DJPaul
14 years ago

  • Milestone Awaiting Review
  • Resolution → invalid
  • Severity major → normal
  • Status new → closed

Closing due to no response from reporter, and unable to recreate.

Note: See TracTickets for help on using tickets.