Merge pull request #545 from zxvv/master

Add an ACL to User, to allow everyone to execute User.passwordReset().
2014-09-11 11:36:53 -07:00 · 2014-09-11 11:36:53 -07:00 · bd56d973d1
parent 642229f513 4fdee0aa6d
commit bd56d973d1
1 changed files with 7 additions and 0 deletions
--- a/lib/models/user.js
+++ b/lib/models/user.js
@ -85,6 +85,13 @@ var options = {
      principalId: Role.EVERYONE,
      permission: ACL.ALLOW,
      property: "confirm"
+    },
+    {
+      principalType: ACL.ROLE,
+      principalId: Role.EVERYONE,
+      permission: ACL.ALLOW,
+      property: "resetPassword",
+      accessType: ACL.EXECUTE
    }
  ],
  relations: {