search

AntzCode / ossn-theme-fakebook

Facebook theme for ossn-opensource-socailnetwork.org
3 stars 2 forks source link

Normal user can see a link to ban other users #4

Closed AntzCode closed 4 years ago

AntzCode commented 4 years ago

Banning users is a privilege for administrators and moderators only.

There is a link in the menu that enables a normal user to ban any other user. Clicking that link produces a 404 for the normal user, because the normal user is not permitted to perform that action.

The link should not be visible at all unless the user is a moderator or administrator.

AntzCode commented 4 years ago

If the user does not have permission to moderate users, then JavaScript will remove the option from the menu.