Skip to:
Content
Pages
Categories
Search
Top
Bottom

Front End Profile Editing


  • paton400
    Participant

    @paton400

    9 years, 10 months ago

    Hey guys, me again!

    I’m using a plugin called BuddyPress xProfiles ACL (which is great) to allow certain user roles to edit information in users profile fields (I don’t want the individual users to have access to make these changes).

    This works great, but it also allows these user roles to read through other users private messages, change avatars, settings etc.

    I’d like to make it that my managers can log in (front end) and change their authorised profile fields for other users (NOTHING ELSE).

    I don’t mind admin having access to all, but not anyone else.

    Please can you tell me how to set this up?

    Regards

Viewing 2 replies - 1 through 2 (of 2 total)

  • Henry Wright
    Moderator

    @henrywright

    9 years, 10 months ago

    Hi @paton400

    This works great, but it also allows these user roles to read through other users private messages, change avatars, settings etc

    If this applies to non-admin users such as contributors or subscribers, then this is a mighty big flaw. If that is happening due to the plugin then I’d expect the plugin author will want to know about it. Try raising the issue with them as a bug report or mentioning it in their support forum.


    paton400
    Participant

    @paton400

    9 years, 10 months ago

    No, I need to grant the user role permission to ‘edit users’. But by granting that, I’m granting them access too much access.

    I want only want them to be able to change the information in other users profile fields. I don’t want them to be able to read private messages.

    Is this a question for Buddypress, WordPress or my user role permissions plugin?

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Front End Profile Editing’ is closed to new replies.

Topic Info

Skip to toolbar