From 6f02cd1ec858e7345a5ea1bc9050710b16e712c6 Mon Sep 17 00:00:00 2001
From: Sebastien Ros <none@none>
Date: Thu, 1 Dec 2011 12:35:57 -0800
Subject: [PATCH] #18157: Adding a exception on RequestLostPassword action when
 appying AccessFrontEnd permission

Work Item: 18157

--HG--
branch : 1.x
---
 .../Modules/Orchard.Users/Security/AccessFrontEndFilter.cs     | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/src/Orchard.Web/Modules/Orchard.Users/Security/AccessFrontEndFilter.cs b/src/Orchard.Web/Modules/Orchard.Users/Security/AccessFrontEndFilter.cs
index efcadfdc7..38416591a 100644
--- a/src/Orchard.Web/Modules/Orchard.Users/Security/AccessFrontEndFilter.cs
+++ b/src/Orchard.Web/Modules/Orchard.Users/Security/AccessFrontEndFilter.cs
@@ -20,7 +20,8 @@ namespace Orchard.Users.Security {
             var isAuthPage = (filterContext.ActionDescriptor.ActionName == "LogOn"
                               || filterContext.ActionDescriptor.ActionName == "ChangePassword"
                               || filterContext.ActionDescriptor.ActionName == "AccessDenied"
-                              || filterContext.ActionDescriptor.ActionName == "Register")
+                              || filterContext.ActionDescriptor.ActionName == "Register"
+                              || filterContext.ActionDescriptor.ActionName == "RequestLostPassword")
                              && filterContext.ActionDescriptor.ControllerDescriptor.ControllerName == "Account";
 
             if (!AdminFilter.IsApplied(filterContext.RequestContext) && !isAuthPage && !_authorizer.Authorize(StandardPermissions.AccessFrontEnd, T("Can't access this website"))) {