From 0c7fd67dcabec0801d561aaf119335eace211192 Mon Sep 17 00:00:00 2001
From: Jack Cheng <jack.cheng@commercan.com>
Date: Thu, 25 Jun 2015 12:57:09 -0700
Subject: [PATCH] [Fixes #5418] Lost Password not working with Anonymous Access
 Off

---
 .../Modules/Orchard.Users/Controllers/AccountController.cs     | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/src/Orchard.Web/Modules/Orchard.Users/Controllers/AccountController.cs b/src/Orchard.Web/Modules/Orchard.Users/Controllers/AccountController.cs
index 6360a2574..fab5ea007 100644
--- a/src/Orchard.Web/Modules/Orchard.Users/Controllers/AccountController.cs
+++ b/src/Orchard.Web/Modules/Orchard.Users/Controllers/AccountController.cs
@@ -242,6 +242,7 @@ namespace Orchard.Users.Controllers {
             }
         }
 
+        [AlwaysAccessible]
         public ActionResult LostPassword(string nonce) {
             if ( _userService.ValidateLostPassword(nonce) == null ) {
                 return RedirectToAction("LogOn");
@@ -253,6 +254,7 @@ namespace Orchard.Users.Controllers {
         }
 
         [HttpPost]
+        [AlwaysAccessible]
         [ValidateInput(false)]
         public ActionResult LostPassword(string nonce, string newPassword, string confirmPassword) {
             IUser user;
@@ -281,6 +283,7 @@ namespace Orchard.Users.Controllers {
             return RedirectToAction("ChangePasswordSuccess");
         }
 
+        [AlwaysAccessible]
         public ActionResult ChangePasswordSuccess() {
             return View();
         }