bbPress bug with MultiSite
-
bbp_check_user_edit() appears to use the following condition:
if ( !is_user_logged_in() || ( is_multisite() && !current_user_can( ‘manage_network_users’ ) && bbp_is_user_home() && !apply_filters( ‘enable_edit_any_user_configuration’, true ) ) || !current_user_can( ‘edit_user’, bbp_get_displayed_user_id() ) ) {
The key portion of that being:
( is_multisite() && !current_user_can( ‘manage_network_users’ ) && bbp_is_user_home() && !apply_filters( ‘enable_edit_any_user_configuration’, true ) )
This appears to be written intending to disable the ability for site admins on a network to edit users. However the code here does not seam to do any tests for what the user id is and who’s currently logged in.
This has the unwanted effect of removing the ability for a normal non-superadmin user to edit their own profile because this code activates when multisite is enabled and doesn’t take the fact they are trying to edit their own profile into account.
- You must be logged in to reply to this topic.