Fixed Moderators can access the spam clean despite "Use the spam cleaner" is set to Never

[ivp]

Affected version

2.1.5a

Although "Use the spam cleaner" option is set to Never, moderators can access spam cleaner.

Analyze permissions show: Use the spam cleaner: No.

Ref: https://xenforo.com/community/threads/moderators-can-access-the-spam-clean.162661/

 

[Chris D]

Where do they have access to the spam cleaner specifically?

If they do not have the permission, it shouldn't (and doesn't in my testing) display the "Spam" link anywhere.

 

[ivp]

They have option "Spam clean" in approval queue.

 

[XF Bug Bot]

Thank you for reporting this issue. It has now been resolved and we are aiming to include it in a future XF release (2.1.6).

Change log:

When viewing the approval queue, ensure the "Spam clean" option only displays to moderators who have permission to use the spam cleaner.

Any changes made as a result of this issue being resolved may not be rolled out here until later.

 

[ivp]

@Chris D is there are a workaround or fix to be applied in the meantime?