@mrandrewaustria – i’d suggest a more positive approach over the above reply.
if you can reproduce the issue consistently (via bp-default theme and disabled third party plugins) – create a trac ticket with the steps/details. I doubt the main developers are looking downward on people reporting issues (why would they?)
if the crop/favorite actions are not working – sounds like a javascript issue
for email – there are several action and filters hooks to use and different ways (client side or extend a custom register page)
then perform a count and compare to your set threshold of activity updates prior to adding the permissions to the userdata. ( if you look at the member profile stats plugin – there is a function called etivite_bp_member_profile_stats_get_member_status_count() – which pulls only activity_updates )
activity types are fluid – so any plugin may add their own besides bp-core. besides querying the activity table for distinct types; the global $bp->activity->actions stores the action/type for each component registered in bp-core. (note, another plugin may not use this method and create an activity type on their own)
Checking those would allow regular members to send PM to other members meeting the requirement (ie, a friend, a follower connection, or member sharing the group membership)
If none are checked – then by default – only the administrator may send PMs to members (and members to the administrators defined by the wp_cap)
have a look at the block activity types plugin – you can see where i hook and block inserting to the db. it would be easy with further work to grab the the_post info and perform whatever checks on the post data.
the messages_screen_compose() function is not loaded until the subnav on a user profile – which contains the form submit catch/verify nonce. you may need to duplicate that code (since it does load the template files)
