Details
-
Bug
-
Resolution: Duplicate
-
Major
-
None
-
11.3.1, 11.5, 10.11.9
-
None
-
Unknown
-
Description
Reproduction steps:
- Login on a new instance as admin (notice the forget username / reset password links)
- In Admin > Rights check "Prevent unregistered user to view pages"
- Logout and try to login again
Expected result:
- the links "Forgot username / Reset password" should still be available
Obtained result:
- The links are not available anymore
Attachments
Issue Links
- duplicates
-
XWIKI-11205 If view rights are not allowed for guest users then ResetPassword doesn't work
- Closed
- relates to
-
XWIKI-16661 RCE using reset password
- Closed
-
XWIKI-16544 Unauthenticated user can retrieve the list of users through getdocuments.vm
- Closed