| @@ -142,9 +142,9 @@ | ||
| 142 | 142 | array( |
| 143 | 143 | 'name' => __( 'Trigger', 'gamipress' ), |
| 144 | 144 | 'tooltip' => __( 'The event user has triggered.', 'gamipress' ), |
| 145 | 145 | 'label_cb' => 'cmb_tooltip_label_cb', |
| 146 | - 'id' => ( ( ! is_gamipress_upgraded_to( '1.4.7' ) ) ? $prefix : '' ) . 'trigger_type', | |
| 146 | + 'id' => 'trigger_type', | |
| 147 | 147 | 'type' => 'advanced_select', |
| 148 | 148 | 'options' => gamipress_get_activity_triggers(), |
| 149 | 149 | ), |
| 150 | 150 | array( |
| @@ -155,13 +155,9 @@ | ||
| 155 | 155 | 'type' => 'text', |
| 156 | 156 | ), |
| 157 | 157 | ); |
| 158 | 158 | |
| 159 | - if( ! is_gamipress_upgraded_to( '1.4.7' ) ) { | |
| 160 | - $trigger = ct_get_object_meta( $object_id, $prefix . 'trigger_type', true ); | |
| 161 | - } else { | |
| 162 | - $trigger = $object->trigger_type; | |
| 163 | - } | |
| 159 | + $trigger = $object->trigger_type; | |
| 164 | 160 | |
| 165 | 161 | // If is a specific activity trigger, then add the achievement_post field |
| 166 | 162 | if( in_array( $trigger, array_keys( gamipress_get_specific_activity_triggers() ) ) ) { |
| 167 | 163 | |
| @@ -311,8 +307,12 @@ | ||
| 311 | 307 | */ |
| 312 | 308 | function gamipress_get_log_extra_data_ui_ajax_handler() { |
| 313 | 309 | // Security check, forces to die if not security passed |
| 314 | 310 | check_ajax_referer( 'gamipress_admin', 'nonce' ); |
| 311 | + | |
| 312 | + // Check user capabilities | |
| 313 | + if( ! current_user_can( gamipress_get_manager_capability() ) ) | |
| 314 | + wp_send_json_error( __( 'You are not allowed to perform this action.', 'gamipress' ) ); | |
| 315 | 315 | |
| 316 | 316 | ct_setup_table( 'gamipress_logs' ); |
| 317 | 317 | |
| 318 | 318 | $ct_object = ct_get_object( absint( $_REQUEST['object_id'] ) ); |
