Skip to:
Content
Pages
Categories
Search
Top
Bottom

I can see users' private messages

  • @jetlej

    Participant

    Not sure how this happened, but I can see any user’s private messages as a Keymaster. I am using a user role editor plugin so permissions have changed, but I don’t see any setting that would allow this behavior.

    Any ideas on how to fix this, or what capability would allow to do this in the first place?

Viewing 12 replies - 1 through 12 (of 12 total)
  • @jetlej

    Participant

    Bump, this is a serious issue

    @henrywright-1

    Member

    @jetlej does it happen with the user role editor plugin deactivated?

    @jetlej

    Participant

    Yes it happens even with the plugin deactivated

    @henrywright-1

    Member

    @jetlej which theme are you using?

    @jetlej

    Participant

    I have disabled all plugins besides Buddypress and switched to the default Buddypress theme and am still seeing the issue.

    It says the conversation is between the admin account and the two users that the message is actually between.

    @henrywright-1

    Member

    @jetlej are you logged in as ‘admin’? That would explain it as admin has access rights to member’s private messages. Try setting up a dummy user with subscriber access rights. You’ll most probably not be able to read the messages.

    @jetlej

    Participant

    You’re saying it’s normal for an admin to have rights to see private messages? That’s HORRIBLE for privacy. Can’t be right. Can @johnjamesjacoby verify this?

    @henrywright-1

    Member

    @jetlej as far as I know Admin can do that by default. Personally as a website owner I would want that functionality to be sure that my members were behaving themselves.

    @scimea

    Participant

    I need this functionality on my website. How does admin see the private messages in BuddyPress?

    @johnjamesjacoby

    Keymaster

    Hey @jetlej.

    On WordPress multisite, Super Administrators can edit/see/delete anything they want to. It’s their site, after all, so they are free to police it.

    On WordPress single site, all Administrators have the same privileges as above.

    We have been slowly rolling in the concept of moderator capabilities into BuddyPress for the past few years, though it’s not quite in a place yet where it’s been fully audited and integrated to be able to add/remove explicit permissions.

    It’s not ideal for everyone, but it works well for most. Can you explain more about your setup and how this is an issue?

    @scimea

    Participant

    Hi @johnjamesjacoby

    http://www.helpmemove.ca/wordpress/

    That is the website I am developing. It is a WordPress single site. Basically I need admin to be able to see conversations between members in the activity stream or see the private messages between members.

    Using the BP Activity Privacy plugin I can set the activity stream option to “admin only” as a member, but this stops the member I mention from seeing the message!

    I need the admin to see conversation between a “member1” and “member2” whether it be via activity stream or private messages, but other members should not be able to see it.

    Basically only admin, member1, member2 need to be able to see a conversation. Wondering if there is any way to do this!

    Thanks,
    Adam

    @aburi

    Participant

    Hey @johnjamesjacoby,

    It sounds like admins, by default, should have access to member’s ‘messages’ page.

    On my install (latest versions of everything), however, it populates the admin’s messages within the member’s profile template – not the member’s messages.

    Any chance you know what’s going on here?

    Thanks,
    Alex

Viewing 12 replies - 1 through 12 (of 12 total)
  • The topic ‘I can see users' private messages’ is closed to new replies.
Skip to toolbar