Logic Bug "Welcome Login Page" – Found

I have been having trouble setting up my page, and I now I know why. You have a logic bug in the code.

I have tried this with 2 user accounts:
Level 0: Has no access or “shouldn’t have access” (but gets access anyways)
Level 1: has access.

A Level 0 user can access a page that it shouldn’t have access to after login.

I am using BuddyPress

• URIs that require “Level #1 or higher” /activity
• Login welcome page also goes to “activity” page (this page seems to overwrite the restricted access setting), in the settings on the page it reads “This Page is your:
  Login Welcome Page
  ( automatically guarded by s2Member )”

However, upon logging in as an Level 0 access user I can view the “activity” page, and I can post that shouldn’t happen. If I make it so the welcome page is not “activity” than I can’t access the page. I would think the Restrictions would override all other settings.

I also wish I could easily redirect multiple users after logging on based on access to different pages which could help avoid this issue. I am willing to pay for such a feature if this can be done to the software as a standard feature.

P.S. wish you had a “Report a Bug” function some place, as I hope this gets looked at…

• This topic was modified 4 years, 8 months ago by  Rich Rice. Reason: added tags