Managing signups in a multisite environment: Permission problem

[henry.wright]

If a user registers via the front end and doesn't activate their account through the email that is sent out, admins are given the opportunity to manage them through the Users > Manage Signups screen. Logged in as super admin, after clicking 'Activate', I get the message:

You do not have sufficient permissions to access this page.

The user remains in pending state.

Steps to reproduce:

1. Go to the front-end registration form and register a dummy user.
2. Log into the network dashboard as super admin.
3. Go to Users > Manage Signups
4. Click 'Activate' under the dummy user's username

[rogercoathup]

To confirm the problem -- we can reproduce on our sites.

[johnjamesjacoby]

I'll look at this soon, since I've touched this code most recently probably.

[r-a-y]

Is this still an issue?

I just tried henry.wright's steps to duplicate and cannot confirm.

When I click on "Activate", I get taken to the "Activate Pending Accounts" page asking me to confirm my choice before activating the account in question.

[imath]

Just tested, i confirm like @r-a-y i'm able as a super admin to activate/resend/delete a signup on multisite config, having BuddyPress network activated.

[DJPaul]

There is a 2-2 split between people who have reported recreating the issue, and those who can't. I am moving this back to Under Consideration while we investigate this further.

[CodeMonkeyBanana]

I have this same issue. There is no way to activate pending users from admin if BP_ENABLE_MULTIBLOG is enabled. It just gives the general permission error.

If BP_ENABLE_MULTIBLOG is false then in bp-members-admin.php on line 1863 this function will execute:

public function signups_admin_manage( $action = '' )

However, if If BP_ENABLE_MULTIBLOG is true then this function is not hit. Callstack is not much help here as it's failing before it gets to this thread of code.

Current workaround: This plugin offers the same functionality and works ​https://wordpress.org/plugins/unconfirmed/ only seems to work for network admin though.

[r-a-y]

CodeMonkeyBanana - I read your forum post and your issue is actually #6371.

Everybody else - Do you have BP_ENABLE_MULTIBLOG set to true?

[rogercoathup]

Yes, we have BP_ENABLE_MULTIBLOG set to true

[r-a-y]

Yes, we have BP_ENABLE_MULTIBLOG set to true

See #6371 instead.

[henry.wright]

I have BP_ENABLE_MULTIBLOG set to true too.

[r-a-y]

Cool, marking as a duplicate of #6371.

Thanks for confirming everyone and please do test the patch there as well.

[imath]

I've found a way to reproduce this bug without BP_ENABLE_MULTIBLOG set to true

You simply need to only activate BuddyPress on the root blog and not network widely. Then go into the network admin / Manage Signups and clicking on one of the action links will fail.

I think the reason is due to how we add the users submenu. And i believe, this menu should only be displayed at the level where BuddyPress is activated. If it's network activated > network admin, else blog's admin.

Using the attached patch is fixing the issue for me, but i still need to test it on regular config. I'm wondering if it's also fixing the BP_ENABLE_MULTIBLOG mode (#6371).

[DJPaul]

This fixes for everything except multiblog.

[djpaul]

In 10411:

Members wp-admin: only show "Manage Signups" when appropriate.

Using BuddyPress on a multisite but only activated on the root blog
caused an invalid link when inside the Network Admin screens (it was a
Network Admin URL rather than site-specific).

This menu should only be displayed at the level where BuddyPress is
displayed.

Fixes #6360, props imath