Problem with "Change Password"

[xiang.li]

We are trying out the latest 1.3rc4 . I have two problems wishing you can help. Thanks in advance!

I have [ _auth] in my conf.ini as follows:

[_auth]
users_table = Users
username_column = UserName
password_column = Password
email_column = Email

Problems:
1. "Change Password".
I logged in as Admin, when I click "Change Password", I got the following error message:

Errors

* You must be logged in to change your password
Permission Denied

But I did log in as "Admin". Did I hit a bug?

2. "Forgot password"

Without logging in, I tried to use "Forgot Password". I did get an email with an URL to reset my password.
------------------------------------------------------------------------------------
You have requested to reset the password for the user 'operator'.
Please go to the URL below in order to proceed with resetting your password:
<https://www.champnms.com/Activation/index.php?-action=forgot_password&--uuid=6562f4a0-bb28-11e0-9bea-0026b94c>. If you did not make this request, please disregard this email.
------------------------------------------------------------------------------------

But when I click it, it says "No such reset request could be found". How can I get around this error message? Is this also a bug in 1.3rc4 or something else I am missing?

Thanks in advance!
Xiang

[shannah]

This issue have been fixed in SVN - You can download the fixed change_password action from there:
http://weblite.ca/svn/dataface/core/tru ... ssword.php

[ADobkin]

But when I click it, it says "No such reset request could be found". How can I get around this error message? Is this also a bug in 1.3rc4 or something else I am missing?

The password reset requests automatically expire after 10 minutes. If you did not click on the link within this amount of time, then you have to request it again.

Alan

[sworden]

I tried this fix:

This issue have been fixed in SVN - You can download the fixed change_password action from there:
http://weblite.ca/svn/dataface/core/tru ... ssword.php

but now I get a blank screen and this in my error log:
[28-Mar-2012 07:30:58] PHP Fatal error: Class 'Dataface_JavascriptTool' not found in /home/povpc11/public_html/xataface/actions/change_password.php on line 56

I assume I need to add/correct something, but where?

[shannah]

You should update to the latest (1.3.2).

[sworden]

That fixed it.

Thanks, Steve!