#18157: Adding a exception on RequestLostPassword action when appying AccessFrontEnd permission

Work Item: 18157

--HG--
branch : 1.x
This commit is contained in:
Sebastien Ros
2011-12-01 12:35:57 -08:00
parent b46281ce48
commit 6f02cd1ec8
@@ -20,7 +20,8 @@ namespace Orchard.Users.Security {
var isAuthPage = (filterContext.ActionDescriptor.ActionName == "LogOn"
|| filterContext.ActionDescriptor.ActionName == "ChangePassword"
|| filterContext.ActionDescriptor.ActionName == "AccessDenied"
|| filterContext.ActionDescriptor.ActionName == "Register")
|| filterContext.ActionDescriptor.ActionName == "Register"
|| filterContext.ActionDescriptor.ActionName == "RequestLostPassword")
&& filterContext.ActionDescriptor.ControllerDescriptor.ControllerName == "Account";
if (!AdminFilter.IsApplied(filterContext.RequestContext) && !isAuthPage && !_authorizer.Authorize(StandardPermissions.AccessFrontEnd, T("Can't access this website"))) {