Hi,

I set up a new site with buddypress, bbpress and some other plugins.

I did not change the user capabilities for the subscribers.

My Problem is that users can use the “edit this page” link that is placed at the bottom of a page that contains a topic (and the viewing user is author of this topic) that leads the user to the backend (/wp-admin/post.php?post=83716&action=edit for example).
There the user is able to change the published date, the status (sticky, ..) of the topic, the text etc.

I think this is not normal… Subscibers should not be able to access the backend and to change published topics…

My subscribers do not have any edit_posts capabilities. They have just “level 0” and “read” as capability shown in the user role editor.

Is there a problem known that might depend on one of the modules that is installed at my site?

How can I get users not to be able to edit their topics?

I use the following modules:
akismet
bbpress-stay-checked
buddypress
buddypress-xprofile-custom-fields-type
events-manager
user-role-editor
bbpress
bp-force-profile
buddypress-activity-plus
cd-bp-avatar-bubble
gd-bbpress-tools
regenerate-thumbnails
view-own-posts-media-only
bbpress-post-toolbar
bp-profile-search
buddypress-media
easy-wp-smtp
tdlc-birthdays
wp-ffpc
bbpress-simple-advert-units
buddymobile
buddypress-recaptcha
erident-custom-login-and-dashboard
nextend-facebook-connect
ultimate-tinymce
wp-hide-dashboard

Thanks for your help!

[@quan_flo Participant 11 years, 4 months ago]

OK, same issue here. When I click at the edit link below I can make the topic sticky for example.
But I am a normal user. Seems to be a bug?

[@quan_flo Participant 11 years, 4 months ago]

I created a ticket in trac for this
https://bbpress.trac.wordpress.org/ticket/2389#ticket

[@xevo Participant 11 years, 4 months ago]

Officially users should be able to access the wordpress “admin” area since it used to be the only way users could edit any of their data, so this behaviour isn’t all that off.

[@quan_flo Participant 11 years, 4 months ago]

@xevo I understand that the “admin” area should be accessible but all users can manipulate their topics in a way that is not good. Make topics sticky, super sticky, change date… this are privileges I think only admins or moderators should have.