Broadcast permissions

We just discovered that anyone can broadcast from groups whether they are an administrator of the group or even a member, as long as their membership level allows it. This is a spam problem, we need to have only group administrators (or at the very least just group members) able to send out broadcast messages. Is there a fix for this?

Group admin already can send broadcast messages to all group members regardless of this action.

This setting action is supposed for some "group moderators" who can send group messages in any group.

 The permissions are confusing, but after a year, I think I'm getting them! So admins are able to broadcast by default, which is good, but setting the actions by membership isn't working for just "group moderators" - if they have a membership w/ broadcast enabled, they can broadcast a message from a group even if they aren't a member of the group. 

Yes, the check is not properly done for broadcasting access. I recently discovered this also and I have corrected it in my Premium Groups mod. See fix below. It will prevent access if you are not Site or Group Moderator.

Open the file modules\boonex\groups\classes\BxGroupsModule.php

Find :

     function isAllowedBroadcast ($aDataEntry, $isPerformAction = false) {
      
look below you will see :

    if ($this->isAdmin() || $this->isEntryAdmin($aDataEntry))
            return true;
       
Replace with :

        if (!($this->isAdmin() || $this->isEntryAdmin($aDataEntry)))
            return false;