Rob Campbell wrote:
Ok, I think I've found part of the problem. I had it setup where users are not allowed to choose their own password. When they follow the link in their email they are unable to set their password. When they submit the new password there is an Unauthorized error. This is what I am getting in the logs:

2007-08-16T10:18:03 ERROR Zope.SiteErrorLog http://208.70.170.11:8080/test/pwreset_form
Traceback (innermost last):
  Module ZPublisher.Publish, line 119, in publish
  Module ZPublisher.mapply, line 88, in mapply
  Module ZPublisher.Publish, line 42, in call_object
Module Products.CMFFormController.FSControllerPageTemplate, line 90, in __call__ Module Products.CMFFormController.BaseControllerPageTemplate, line 28, in _call
  Module Products.CMFFormController.ControllerBase, line 232, in getNext
- __traceback_info__: ['id = pwreset_form', 'status = success', 'button=None', 'errors={}', 'context=<PloneSite at test>', 'kwargs={}', 'next_action=None', ''] Module Products.CMFFormController.Actions.TraverseTo, line 38, in __call__
  Module ZPublisher.mapply, line 88, in mapply
  Module ZPublisher.Publish, line 42, in call_object
Module Products.CMFFormController.FSControllerPythonScript, line 104, in __call__
  Module Products.CMFFormController.Script, line 145, in __call__
  Module Products.CMFCore.FSPythonScript, line 140, in __call__
  Module Shared.DC.Scripts.Bindings, line 313, in __call__
  Module Shared.DC.Scripts.Bindings, line 350, in _bindAndExec
  Module Products.CMFCore.FSPythonScript, line 196, in _exec
  Module None, line 6, in pwreset_action
   - <FSControllerPythonScript at /test/pwreset_action>
   - Line 6
Module Products.PasswordResetTool.PasswordResetTool, line 151, in resetPassword
  Module Products.remember.content.member, line 309, in setMemberProperties
  Module Products.remember.content.member, line 303, in setProperties
Unauthorized: <AccessControl.unauthorized.Unauthorized instance at 0xd43e8ac>

Where would I need to change permissions to fix this? I looked at the member_auto_workflow permissions for members in the public state, and the owner already has Modify portal content, Set own password and Set own properties.

ah, well, you must realize that the user will NOT have the Owner role at this point. she's not logged in, she's trying to set her initial password. any time the user goes through the PasswordResetTool process, she will be anonymous.

i'm pretty sure this works already in Plone 2.5, although i don't remember exactly how it was handled. and maybe it's broken and i just don't know it... :-P. unfortunately, i don't have time to dig into it any further at the moment. if i can, i'll take a look over the next few days to see what i can discover.

-r


--
Archive: 
http://www.openplans.org/projects/remember/lists/remember/archive/2007/08/1187290899546
To unsubscribe send an email with subject unsubscribe to [EMAIL PROTECTED]  
Please contact [EMAIL PROTECTED] for questions.

Reply via email to