[buddypress-trac] [BuddyPress Trac] #7391: Can 'change' visibility on registration form even for fields marked "Enforce field visibility"

[buddypress-trac]

#7391: Can 'change' visibility on registration form even for fields marked
"Enforce field visibility"
------------------------------------+---------------------
 Reporter:  maccast                 |       Owner:  hnla
     Type:  defect (bug)            |      Status:  closed
 Priority:  normal                  |   Milestone:  2.7.4
Component:  Extended Profile        |     Version:  2.7.2
 Severity:  normal                  |  Resolution:  fixed
 Keywords:  dev-feedback has-patch  |
------------------------------------+---------------------
Changes (by hnla):

 * status:  assigned => closed
 * resolution:   => fixed


Comment:

 In [changeset:"11301"]:
 {{{
 #!CommitTicketReference repository="" revision="11301"
 Xprofile: profile field visibility levels, 'enforce field visibility'

 Corrects an issue where logged out users are allowed to change profile
 field visibility level for registration despite admin disabling setting,
 introduced in 2.7.1 (r: 11221) which fixed inability to change profile
 visibility by user but omitted check for admin enforced levels.

 Add checks for `$field->allow_custom_visibility` to logged out user caps
 check in bp-xprofile-caps.php

 Fixes #7391

 Props maccast, boonebgorges, slaFFik, hnla
 }}}

--
Ticket URL: <https://buddypress.trac.wordpress.org/ticket/7391#comment:11>
BuddyPress Trac <http://buddypress.org/>
BuddyPress Trac