Skip to:
Content
Pages
Categories
Search
Top
Bottom

bbPress bug with MultiSite


  • nadir_seen_fire
    Member

    @nadir_seen_fire

    bbp_check_user_edit() appears to use the following condition:

    if ( !is_user_logged_in() || ( is_multisite() && !current_user_can( ‘manage_network_users’ ) && bbp_is_user_home() && !apply_filters( ‘enable_edit_any_user_configuration’, true ) ) || !current_user_can( ‘edit_user’, bbp_get_displayed_user_id() ) ) {

    The key portion of that being:

    ( is_multisite() && !current_user_can( ‘manage_network_users’ ) && bbp_is_user_home() && !apply_filters( ‘enable_edit_any_user_configuration’, true ) )

    This appears to be written intending to disable the ability for site admins on a network to edit users. However the code here does not seam to do any tests for what the user id is and who’s currently logged in.

    This has the unwanted effect of removing the ability for a normal non-superadmin user to edit their own profile because this code activates when multisite is enabled and doesn’t take the fact they are trying to edit their own profile into account.

Viewing 1 replies (of 1 total)
Viewing 1 replies (of 1 total)
  • You must be logged in to reply to this topic.
Skip to toolbar