diff --git a/lib/models/user.js b/lib/models/user.js
index c43d557f..97ed936c 100644
--- a/lib/models/user.js
+++ b/lib/models/user.js
@@ -85,6 +85,13 @@ var options = {
       principalId: Role.EVERYONE,
       permission: ACL.ALLOW,
       property: "confirm"
+    },
+    {
+      principalType: ACL.ROLE,
+      principalId: Role.EVERYONE,
+      permission: ACL.ALLOW,
+      property: "resetPassword",
+      accessType: ACL.EXECUTE
     }
   ],
   relations: {