Refs #1058: Using validated metadata for new user permission check. Correctly allows...

git-svn-id: https://code.elgg.org/elgg/trunk@3377 36083f99-b078-4883-b0ff-0f9b5a30f544

diff --git a/engine/lib/users.php b/engine/lib/users.php
index 46636548bb3ece808ebb3b34d74836157b2e1b21..e5fb7320a815da3d023d8e1ffae55bc85488148e 100644 (file)
--- a/engine/lib/users.php
+++ b/engine/lib/users.php
@@ -1425,8 +1425,9 @@
                {\r
                        if (\r
                                (($entity->disable_reason == 'new_user') || (\r
-                                       $entity->last_action == 0 && $entity->last_login == 0\r
-                               )) \r
+                                       // if this isn't set at all they're a "new user"\r
+                                       !$entity->validated\r
+                               ))\r
                                && (!isloggedin()))\r
                                return true;\r
                        \r