Skip to:
Content

BuddyPress.org

Opened 2 years ago

Closed 2 years ago

#8747 closed defect (bug) (fixed)

BuddyPress available tools should only be displayed to Administrators

Reported by: imath's profile imath Owned by: imath's profile imath
Milestone: 11.0.0 Priority: normal
Severity: normal Version: 2.0
Component: Administration Keywords: has-patch
Cc:

Description

The Tools admin page is displayed to users having the edit_posts cap which means only the user with no roles or with the subscriber one cannot access to this page.

Contributors, Authors and Editors can then see the "Available BuddyPress tools" card that we are displaying into this tools page.

As these roles cannot access to the corresponding BP Tools they get a wp_die() page. The patch attached to this ticket is making sure we're displaying the BuddyPress tools intro card to Administrators.

Attachments (1)

8747.patch​ (1012 bytes) - added by imath 2 years ago.

Download all attachments as: .zip

Change History (2)

@imath
2 years ago

#1 @imath
2 years ago

  • Owner set to imath
  • Resolution set to fixed
  • Status changed from new to closed

In 13334:

Make sure the Available BP Tools card is only showed to Administrators

This card informs about the available BuddyPress tools into the wp-admin/tools.php page. As this page can be accessed by Contributors, Authors and Editors, we need a bp_moderate capability check before inserting this card.

Fixes #8747

Note: See TracTickets for help on using tickets.