Notas da versão 1.6.2: 5 correções 2 reforços de segurança
Correção
- Fixed an issue where "Lock all of BuddyPress" was skipped when the Levels page setting was empty, because every page was treated as the Levels page. #131 (@dparker1005)
- On sites using PMPro Approvals, members pending approval no longer get a level's BuddyPress groups and member types until they are approved, and denying or resetting a member now removes them. This changes what pending members get in BuddyPress. #136 (@flintfromthebasement)
- The PMPro Approvals integration no longer calls functions that were deprecated in version 1.4. #136 (@flintfromthebasement)
- The member directory count is now only filtered when the member directory is locked, so the "All Members" count matches the list. #135 (@flintfromthebasement)
- Fixed admin menu paths in the readme and the settings page help text. #137 (@flintfromthebasement)
Segurança
- "Lock all of BuddyPress" now also applies to the BuddyPress REST API (matching routes regardless of letter case), the activity oEmbed route, activity RSS feeds, BuddyPress AJAX requests and the activity heartbeat. As a result, BuddyPress blocks that load their data through the REST API show nothing to locked-out users, and a locked-out user's own Friends and Groups tab lists and @mention suggestions no longer load. #138 (@dparker1005)
- Private messaging and joining groups now follow the membership level settings everywhere, including the REST API and AJAX requests, not just in the interface. #138 (@dparker1005)