Password Reset does not login the user and hence user cannot update their profile
88 views
Skip to first unread message
Osi Emoekpere
unread,
Aug 12, 2012, 9:11:43 AM8/12/12
Reply to author
Sign in to reply to author
Forward
Sign in to forward
Delete
You do not have permission to delete messages in this group
Copy link
Report message
Show original message
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message
to mezzani...@googlegroups.com
Hi There,
When a user uses a token to reset their password, mezzanine doesn't login the user before redirecting to the profile update page and hence the user cannot update their profile since they are not logged in.
Is this how it's supposed to work? (Was there some security reason it was done this way?)
Regards
Osi
Stephen McDonald
unread,
Aug 12, 2012, 4:36:44 PM8/12/12
Reply to author
Sign in to reply to author
Forward
Sign in to forward
Delete
You do not have permission to delete messages in this group
Copy link
Report message
Show original message
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message
to mezzani...@googlegroups.com
The token should log them in.
Check that you have Mezzanine's auth backend enabled in your settings module: