[buddypress-trac] [BuddyPress Trac] #7833: BP Nouveau: do not check the user exists when Accepting/rejecting friendships

buddypress-trac noreply at wordpress.org
Wed May 16 18:32:44 UTC 2018


#7833: BP Nouveau: do not check the user exists when Accepting/rejecting
friendships
------------------------------+---------------------
 Reporter:  imath             |       Owner:  imath
     Type:  defect (bug)      |      Status:  closed
 Priority:  normal            |   Milestone:  3.0
Component:  Templates         |     Version:
 Severity:  major             |  Resolution:  fixed
 Keywords:  has-patch commit  |
------------------------------+---------------------
Changes (by imath):

 * status:  assigned => closed
 * resolution:   => fixed


Comment:

 In [changeset:"12094" 12094]:
 {{{
 #!CommitTicketReference repository="" revision="12094"
 Nouveau: do not request a user with a Friendship ID in Ajax handler

 Two actions managed within the common Friendship Ajax handler are not
 sending a user ID but a friendship ID :
 - {{{friends_accept_friendship}}}
 - {{{friends_reject_friendship}}}

 As a result, the user check can wrongly prevent users to accept or decline
 friendships as soon as a friendship ID does not match with an existing
 user ID. For these two specific cases we are now omitting it but keep it
 for all other actions as they are sending a user ID.

 Props DJPaul

 Fixes #7833
 }}}

-- 
Ticket URL: <https://buddypress.trac.wordpress.org/ticket/7833#comment:5>
BuddyPress Trac <http://buddypress.org/>
BuddyPress Trac


More information about the buddypress-trac mailing list