Skip to:
Content
Pages
Categories
Search
Top
Bottom

I can see users' private messages

  • Avatar of jetlej
    jetlej
    Participant

    @jetlej

    Not sure how this happened, but I can see any user’s private messages as a Keymaster. I am using a user role editor plugin so permissions have changed, but I don’t see any setting that would allow this behavior.

    Any ideas on how to fix this, or what capability would allow to do this in the first place?

Viewing 11 replies - 1 through 11 (of 11 total)
  • Avatar of jetlej
    jetlej
    Participant

    @jetlej

    Bump, this is a serious issue

    Avatar of Henry
    Henry
    Participant

    @henrywright-1

    @jetlej does it happen with the user role editor plugin deactivated?

    Avatar of jetlej
    jetlej
    Participant

    @jetlej

    Yes it happens even with the plugin deactivated

    Avatar of Henry
    Henry
    Participant

    @henrywright-1

    @jetlej which theme are you using?

    Avatar of jetlej
    jetlej
    Participant

    @jetlej

    I have disabled all plugins besides Buddypress and switched to the default Buddypress theme and am still seeing the issue.

    It says the conversation is between the admin account and the two users that the message is actually between.

    Avatar of Henry
    Henry
    Participant

    @henrywright-1

    @jetlej are you logged in as ‘admin’? That would explain it as admin has access rights to member’s private messages. Try setting up a dummy user with subscriber access rights. You’ll most probably not be able to read the messages.

    Avatar of jetlej
    jetlej
    Participant

    @jetlej

    You’re saying it’s normal for an admin to have rights to see private messages? That’s HORRIBLE for privacy. Can’t be right. Can @johnjamesjacoby verify this?

    Avatar of Henry
    Henry
    Participant

    @henrywright-1

    @jetlej as far as I know Admin can do that by default. Personally as a website owner I would want that functionality to be sure that my members were behaving themselves.

    Avatar of scimea
    scimea
    Participant

    @scimea

    I need this functionality on my website. How does admin see the private messages in BuddyPress?

    Avatar of John James Jacoby
    John James Jacoby
    Keymaster

    @johnjamesjacoby

    Hey @jetlej.

    On WordPress multisite, Super Administrators can edit/see/delete anything they want to. It’s their site, after all, so they are free to police it.

    On WordPress single site, all Administrators have the same privileges as above.

    We have been slowly rolling in the concept of moderator capabilities into BuddyPress for the past few years, though it’s not quite in a place yet where it’s been fully audited and integrated to be able to add/remove explicit permissions.

    It’s not ideal for everyone, but it works well for most. Can you explain more about your setup and how this is an issue?

    Avatar of scimea
    scimea
    Participant

    @scimea

    Hi @johnjamesjacoby

    http://www.helpmemove.ca/wordpress/

    That is the website I am developing. It is a WordPress single site. Basically I need admin to be able to see conversations between members in the activity stream or see the private messages between members.

    Using the BP Activity Privacy plugin I can set the activity stream option to “admin only” as a member, but this stops the member I mention from seeing the message!

    I need the admin to see conversation between a “member1″ and “member2″ whether it be via activity stream or private messages, but other members should not be able to see it.

    Basically only admin, member1, member2 need to be able to see a conversation. Wondering if there is any way to do this!

    Thanks,
    Adam

Viewing 11 replies - 1 through 11 (of 11 total)

You must be logged in to reply to this topic.