Skip to:
Content
Pages
Categories
Search
Top
Bottom

I can see users' private messages

  • Profile photo of jetlej
    jetlej
    Participant

    @jetlej

    Not sure how this happened, but I can see any user’s private messages as a Keymaster. I am using a user role editor plugin so permissions have changed, but I don’t see any setting that would allow this behavior.

    Any ideas on how to fix this, or what capability would allow to do this in the first place?

Viewing 12 replies - 1 through 12 (of 12 total)
  • Profile photo of jetlej
    jetlej
    Participant

    @jetlej

    Bump, this is a serious issue

    Profile photo of Henry
    Henry
    Participant

    @henrywright-1

    @jetlej does it happen with the user role editor plugin deactivated?

    Profile photo of jetlej
    jetlej
    Participant

    @jetlej

    Yes it happens even with the plugin deactivated

    Profile photo of Henry
    Henry
    Participant

    @henrywright-1

    @jetlej which theme are you using?

    Profile photo of jetlej
    jetlej
    Participant

    @jetlej

    I have disabled all plugins besides Buddypress and switched to the default Buddypress theme and am still seeing the issue.

    It says the conversation is between the admin account and the two users that the message is actually between.

    Profile photo of Henry
    Henry
    Participant

    @henrywright-1

    @jetlej are you logged in as ‘admin’? That would explain it as admin has access rights to member’s private messages. Try setting up a dummy user with subscriber access rights. You’ll most probably not be able to read the messages.

    Profile photo of jetlej
    jetlej
    Participant

    @jetlej

    You’re saying it’s normal for an admin to have rights to see private messages? That’s HORRIBLE for privacy. Can’t be right. Can @johnjamesjacoby verify this?

    Profile photo of Henry
    Henry
    Participant

    @henrywright-1

    @jetlej as far as I know Admin can do that by default. Personally as a website owner I would want that functionality to be sure that my members were behaving themselves.

    Profile photo of scimea
    scimea
    Participant

    @scimea

    I need this functionality on my website. How does admin see the private messages in BuddyPress?

    Profile photo of John James Jacoby
    John James Jacoby
    Keymaster

    @johnjamesjacoby

    Hey @jetlej.

    On WordPress multisite, Super Administrators can edit/see/delete anything they want to. It’s their site, after all, so they are free to police it.

    On WordPress single site, all Administrators have the same privileges as above.

    We have been slowly rolling in the concept of moderator capabilities into BuddyPress for the past few years, though it’s not quite in a place yet where it’s been fully audited and integrated to be able to add/remove explicit permissions.

    It’s not ideal for everyone, but it works well for most. Can you explain more about your setup and how this is an issue?

    Profile photo of scimea
    scimea
    Participant

    @scimea

    Hi @johnjamesjacoby

    http://www.helpmemove.ca/wordpress/

    That is the website I am developing. It is a WordPress single site. Basically I need admin to be able to see conversations between members in the activity stream or see the private messages between members.

    Using the BP Activity Privacy plugin I can set the activity stream option to “admin only” as a member, but this stops the member I mention from seeing the message!

    I need the admin to see conversation between a “member1″ and “member2″ whether it be via activity stream or private messages, but other members should not be able to see it.

    Basically only admin, member1, member2 need to be able to see a conversation. Wondering if there is any way to do this!

    Thanks,
    Adam

    Profile photo of aburi
    Alex
    Participant

    @aburi

    Hey @johnjamesjacoby,

    It sounds like admins, by default, should have access to member’s ‘messages’ page.

    On my install (latest versions of everything), however, it populates the admin’s messages within the member’s profile template – not the member’s messages.

    Any chance you know what’s going on here?

    Thanks,
    Alex

Viewing 12 replies - 1 through 12 (of 12 total)
  • The topic ‘I can see users' private messages’ is closed to new replies.