[buddypress-trac] [BuddyPress] #5254: Message thread still accessible after member has deleted it

[buddypress-trac]

#5254: Message thread still accessible after member has deleted it
-----------------------------------+--------------------
 Reporter:  henrywright            |       Owner:
     Type:  defect (bug)           |      Status:  new
 Priority:  normal                 |   Milestone:  1.9
Component:  Messaging              |     Version:  1.8.1
 Severity:  normal                 |  Resolution:
 Keywords:  has-patch 2nd-opinion  |
-----------------------------------+--------------------
Changes (by imath):

 * keywords:   => has-patch 2nd-opinion


Comment:

 Replying to [comment:1 DJPaul]:
 > We should double-check this for 1.9 and see if it's been a regression
 from previous versions or not.
 Hi Paul, just checked it, and it's happening the same way in 1.8.1.

 I suggest to temporary patch this by checking if the current user has
 deleted the thread adding a check to the is_deleted field in
 BP_Messages_Thread::check_access() so that a regular user doing what
 explains @henrywright will be redirected to his inbox instead of viewing a
 message he deleted (see the 5254.diff attached to this ticket). This
 means, a user that can 'bp_moderate' will still view the message even if
 he deleted it, but he's not a regular user ;)

 If i understand well : a thread is deleted only if sender and recipients
 all deleted it. 1.9 might be too close to review the process of the
 message component.

--
Ticket URL: <https://buddypress.trac.wordpress.org/ticket/5254#comment:2>
BuddyPress <http://buddypress.org/>
BuddyPress