Topic: Front End Profile Editing · BuddyPress.org

Skip to:: Content; Pages; Categories; Search; Top; Bottom

Front End Profile Editing

@paton400

Participant

10 years, 6 months ago

Hey guys, me again!

I’m using a plugin called BuddyPress xProfiles ACL (which is great) to allow certain user roles to edit information in users profile fields (I don’t want the individual users to have access to make these changes).

This works great, but it also allows these user roles to read through other users private messages, change avatars, settings etc.

I’d like to make it that my managers can log in (front end) and change their authorised profile fields for other users (NOTHING ELSE).

I don’t mind admin having access to all, but not anyone else.

Please can you tell me how to set this up?

Regards

Viewing 2 replies - 1 through 2 (of 2 total)

@henrywright

Moderator

10 years, 6 months ago

Hi @paton400

This works great, but it also allows these user roles to read through other users private messages, change avatars, settings etc

If this applies to non-admin users such as contributors or subscribers, then this is a mighty big flaw. If that is happening due to the plugin then I’d expect the plugin author will want to know about it. Try raising the issue with them as a bug report or mentioning it in their support forum.

@paton400

Participant

10 years, 6 months ago

No, I need to grant the user role permission to ‘edit users’. But by granting that, I’m granting them access too much access.

I want only want them to be able to change the information in other users profile fields. I don’t want them to be able to read private messages.

Is this a question for Buddypress, WordPress or my user role permissions plugin?

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘Front End Profile Editing’ is closed to new replies.