Changeset 3607 for branches/plugin/bbp-includes/bbp-user-functions.php

Timestamp:

11/14/2011 03:50:25 AM (13 years ago)

Author:

johnjamesjacoby

Message:

Introduce bbp_template_redirect() and use for checking various edit screens:

• Introduce bbp_check_forum_edit() to check for forum edit
• Introduce bbp_check_topic_edit() to check for topic edit
• Introduce bbp_check_reply_edit() to check for reply edit
• Introduce bbp_check_topic_tag_edit() to check for topic tag edit
• Introduce bbp_check_user_edit() to check for user edit
• Remove these checks from bbp_pre_get_posts() and only use it to setup query vars
• Fixes #1684, r3605
• For 2.1 (plugin) branch

File:

• branches/plugin/bbp-includes/bbp-user-functions.php (modified) (1 diff)

branches/plugin/bbp-includes/bbp-user-functions.php

@@ -1249 +1249 @@
 }
 
+/** Premissions ***************************************************************/
+
+/**
+ * Redirect if unathorized user is attempting to edit a topic
+ * 
+ * @since bbPress (r3605)
+ *
+ * @uses bbp_is_topic_edit()
+ * @uses current_user_can()
+ * @uses bbp_get_topic_id()
+ * @uses wp_safe_redirect()
+ * @uses bbp_get_topic_permalink()
+ */
+function bbp_check_user_edit() {
+
+    // Bail if not editing a topic
+    if ( !bbp_is_single_user_edit() )
+        return;
+
+    // Only allow super admins on multisite to edit every user.
+    if ( !is_user_logged_in() || ( is_multisite() && !current_user_can( 'manage_network_users' ) && bbp_is_user_home() && !apply_filters( 'enable_edit_any_user_configuration', true ) ) || !current_user_can( 'edit_user', bbp_get_displayed_user_id() ) ) {
+        wp_safe_redirect( bbp_get_user_profile_url( bbp_get_displayed_user_id() ) );
+        exit();
+    }
+}
+
 ?>