1

Closed

Password Recovery Control errors out sending email

description

I believe the issue is that the user is logged in and recovering their own password. This changes their existing password and essentially logs them out of SharePoint. Then, when the email is being sent, it's sent in the context of the user which no longer has permissions. Change the password recovery control to send the email while running with elevated privileges.
Closed Jul 28, 2012 at 3:33 PM by ccoulson
Released in version 1.3

comments

Edivaldo wrote Apr 10, 2012 at 10:21 PM

We have a version with this change?
"Change the password recovery control to send the email while running with elevated privileges."
I am trying to use SharePoint 2010 FBA Pack but this issue is happening for me
Can you help me?

ccoulson wrote Apr 10, 2012 at 11:07 PM

It hasn't been fixed yet. But generally, logged in users should not be using the password recovery control (they're logged in, so they must know their password). As long as only unauthenticated users use the control (or authenticated users recover a DIFFERENT users password) there should be no issues.

ccoulson wrote Jun 20, 2012 at 6:04 PM

Couldn't reproduce, but updated the password recovery control to run with elevated privileges when sending the email. Commit 1221d7113ee4.

Sign in to add a comment