Ticket #2389: 2389.patch

includes/admin/forums.php

@@ -40 +40 @@
          */
         public function __construct() {
                 $this->setup_globals();
+                $this->check_admin_cap();
                 $this->setup_actions();
         }
 
@@ -94 +95 @@
         }
 
         /**
+         * Check if the current user have the capability to view the forums admin.
+         *
+         * @since bbPress (rX)
+         */
+        public function check_admin_cap() {
+                global $pagenow;
+
+                if ( 'post.php' === $pagenow && ! empty( $_GET['post'] ) ) {
+
+                        if ( bbp_is_forum( (int) $_GET['post'] ) && ! current_user_can( 'bbp_forums_admin' ) )
+                            wp_die( __( 'You are not allowed to view the forums admin.', 'bbpress' ) );
+
+                }
+        }
+
+        /**
          * Admin globals
          *
          * @since bbPress (r2646)

includes/admin/replies.php

@@ -40 +40 @@
          */
         public function __construct() {
                 $this->setup_globals();
+                $this->check_admin_cap();
                 $this->setup_actions();
         }
 
@@ -105 +106 @@
         }
 
         /**
+         * Check if the current user have the capability to view the replies admin.
+         *
+         * @since bbPress (rX)
+         */
+        public function check_admin_cap() {
+                global $pagenow;
+
+                if ( 'post.php' === $pagenow && ! empty( $_GET['post'] ) ) {
+
+                        if ( bbp_is_reply( (int) $_GET['post'] ) && ! current_user_can( 'bbp_replies_admin' ) )
+                            wp_die( __( 'You are not allowed to view the replies admin.', 'bbpress' ) );
+
+                }
+        }
+
+        /**
          * Admin globals
          *
          * @since bbPress (r2646)

includes/admin/topics.php

@@ -40 +40 @@
          */
         public function __construct() {
                 $this->setup_globals();
+                $this->check_admin_cap();
                 $this->setup_actions();
         }
 
@@ -105 +106 @@
         }
 
         /**
+         * Check if the current user have the capability to view the topics admin.
+         *
+         * @since bbPress (rX)
+         */
+        public function check_admin_cap() {
+                global $pagenow;
+
+                if ( 'post.php' === $pagenow && ! empty( $_GET['post'] ) ) {
+
+                        if ( bbp_is_topic( (int) $_GET['post'] ) && ! current_user_can( 'bbp_topics_admin' ) )
+                            wp_die( __( 'You are not allowed to view the topics admin.', 'bbpress' ) );
+
+                }
+        }
+
+        /**
          * Admin globals
          *
          * @since bbPress (r2646)