Fixed canBypassUserPrivacy call

[Syndol]

In the user model (Model/User.php) line 2003:

if ($this->canBypassUserPrivacy($viewingUser))
{
    return true;
}

should be

if ($this->canBypassUserPrivacy($null, $viewingUser))
{
    return true;
}

as the function being called is

canBypassUserPrivacy(&$errorPhraseKey = '', array $viewingUser = null)

line 1878 of same file

Took me many hours to track this one down

 

[Edrondol]

Wait. Are there conditions under which people can bypass security? What can they get to?

 

[Syndol]

Its just for viewing posts and profiles as a member - no security implications.

 

[Edrondol]

Okay, thanks.

 

[Mike]

Fixed, thanks.