Changeset 4316

Timestamp:

11/03/2012 08:00:14 AM (12 years ago)

Author:

johnjamesjacoby

Message:

Capabilities:

• Enforce blocked logged in users by showing them a 404 if they cannot spectate.
• See #1939.

Location:

trunk/includes

Files:

• core/actions.php (modified) (1 diff)
• users/functions.php (modified) (1 diff)

trunk/includes/core/actions.php

@@ -246 +246 @@
  * 3. Editing forums, topics, replies, users, and tags
  */
+add_action( 'bbp_template_redirect', 'bbp_forum_enforce_blocked',   -1 );
 add_action( 'bbp_template_redirect', 'bbp_forum_enforce_hidden',    -1 );
 add_action( 'bbp_template_redirect', 'bbp_forum_enforce_private',   -1 );

trunk/includes/users/functions.php

@@ -1486 +1486 @@
 }
 
+/**
+ * Check if a user is blocked, or cannot spectate the forums.
+ *
+ * @since bbPress (r2996)
+ *
+ * @uses is_user_logged_in() To check if user is logged in
+ * @uses is_super_admin() To check if user is a super admin
+ * @uses current_user_can() To check if the current user can spectate
+ * @uses is_bbpress() To check if in a bbPress section of the site
+ * @uses bbp_set_404() To set a 404 status
+ */
+function bbp_forum_enforce_blocked() {
+
+    // Bail if not logged in or super admin
+    if ( ! is_user_logged_in() || is_super_admin() ) {
+        return;
+    }
+
+    // Set 404 if in bbPress and user cannot spectate
+    if ( is_bbpress() && ! current_user_can( 'spectate' ) ) {
+        bbp_set_404();
+    }
+}
+
 /** Converter *****************************************************************/