Skip to:
Content

BuddyPress.org

Opened 13 years ago

Closed 13 years ago

#4147 closed defect (bug) (no action required)

Can change other members profile pictures

Reported by: adolfius's profile adolfius Owned by:
Milestone: Priority: normal
Severity: normal Version: 1.5.4
Component: Members Keywords: reporter-feedback
Cc:

Description

Hi there,

I am using BP 1.5.4. By going to someone elses profile, then appending the URL with /profile/change-avatar/ I can change their avatar. I initially thought it would just change mine. But no, I can change other members.

Thanks!

Josh Dean

Change History (2)

#1 @r-a-y
13 years ago

  • Keywords reporter-feedback added; needs-patch removed

Hi Josh, are you the super administrator for the site? If so, you are able to edit any member's avatar.

A regular user should not be able to edit another member's avatar. I just tested this locally and this works as expected.

Can you let us know if you are the admin of the site or a regular user?

#2 @DJPaul
13 years ago

  • Milestone Awaiting Review deleted
  • Resolution set to invalid
  • Severity changed from major to normal
  • Status changed from new to closed

Closing due to no response from reporter, and unable to recreate.

Note: See TracTickets for help on using tickets.