I tracked it down, guys. Thanks for your help.
right, it’s not something that’s obvious, but if any user knows they just have to go to wp-admin and log in, it can be a huge huge issue.
Wordpress defines User roles as: Subscriber, Contributor, Author, Editor, Administrator. Admin being the highest level of control, obviously.
BBpress seems to have roles defined as: Keymaster, Moderator, Participant, Spectator, Blocked.
I have WP set to give new users Subscriber role
I have BBpress set to give new users Participant role
HOWEVER, when somebody creates an account in BBpress, they are given the Forum role of Participant BUT the WordPress role of Administrator.
The site is http://bkparties.com/bkbp-resourcecenter/
I think it’s bbpress, actually. I have wordpress set to give new users only Subscriber level access, which is fine. when somebody registers for the forum through bbpress, they are given administrator level access. If i register a new user outside of bbpress, they get Subscriber.
Thanks, i’ll look into that. BUT *why* would BBpress give a newly registered forum user admin-level access to wordpress. it makes NO sense at all.
They are automatically granted Administrator access to WP backend when they register on bbpress
