[buddypress-trac] [BuddyPress Trac] #6835: [Bug] Banned users can post!

buddypress-trac noreply at wordpress.org
Tue Jan 19 15:18:15 UTC 2016


#6835: [Bug] Banned users can post!
--------------------------+-----------------------------
 Reporter:  davelr1       |      Owner:
     Type:  defect (bug)  |     Status:  new
 Priority:  normal        |  Milestone:  Awaiting Review
Component:  API           |    Version:  2.4.0
 Severity:  normal        |   Keywords:
--------------------------+-----------------------------
 Hi!

 My "bad" users just discovered that when a group admin kick/ban someone,
 the person can still post if they use the "go back" option on the browser.

 Is guess buddypress only checks if the person is from that group when the
 form are generated... the post probably doesn't check if the person is
 member or not. The only way to a group admin make the banned user stop
 posting using this method is to close the topic for new replies.

 As a site admin I can ban the user from the /wp-admin/user.php and this
 bug will not work. (but will ban the person from the whole site)

 Did you guys know about this problem? Is there any temporary solution to
 make group admins ban users without having this trouble?

 Found this bug using the most recent version of buddypress + bbpress and
 wordpress... also tried the alpha from bbpress... tried with different
 themes with only buddypress and bbpress as active plugins.

 I also test with buddypress 2.2.3.1 and bbpress 2.5.7 (with wordpress
 3.8).. so I guess this bug is present in all versions.

 Thank you :)

--
Ticket URL: <https://buddypress.trac.wordpress.org/ticket/6835>
BuddyPress Trac <http://buddypress.org/>
BuddyPress Trac


More information about the buddypress-trac mailing list