Ok, I think I've found part of the problem.  I had it setup where users 
are not allowed to choose their own password.  When they follow the link 
in their email they are unable to set their password.  When they submit 
the new password there is an Unauthorized error.  This is what I am 
getting in the logs:

2007-08-16T10:18:03 ERROR Zope.SiteErrorLog 
http://208.70.170.11:8080/test/pwreset_form
Traceback (innermost last):
   Module ZPublisher.Publish, line 119, in publish
   Module ZPublisher.mapply, line 88, in mapply
   Module ZPublisher.Publish, line 42, in call_object
   Module Products.CMFFormController.FSControllerPageTemplate, line 90, 
in __call__
   Module Products.CMFFormController.BaseControllerPageTemplate, line 
28, in _call
   Module Products.CMFFormController.ControllerBase, line 232, in getNext
    - __traceback_info__: ['id = pwreset_form', 'status = success', 
'button=None', 'errors={}', 'context=<PloneSite at test>', 'kwargs={}', 
'next_action=None', '']
   Module Products.CMFFormController.Actions.TraverseTo, line 38, in 
__call__
   Module ZPublisher.mapply, line 88, in mapply
   Module ZPublisher.Publish, line 42, in call_object
   Module Products.CMFFormController.FSControllerPythonScript, line 104, 
in __call__
   Module Products.CMFFormController.Script, line 145, in __call__
   Module Products.CMFCore.FSPythonScript, line 140, in __call__
   Module Shared.DC.Scripts.Bindings, line 313, in __call__
   Module Shared.DC.Scripts.Bindings, line 350, in _bindAndExec
   Module Products.CMFCore.FSPythonScript, line 196, in _exec
   Module None, line 6, in pwreset_action
    - <FSControllerPythonScript at /test/pwreset_action>
    - Line 6
   Module Products.PasswordResetTool.PasswordResetTool, line 151, in 
resetPassword
   Module Products.remember.content.member, line 309, in setMemberProperties
   Module Products.remember.content.member, line 303, in setProperties
Unauthorized: <AccessControl.unauthorized.Unauthorized instance at 
0xd43e8ac>

Where would I need to change permissions to fix this?  I looked at the 
member_auto_workflow permissions for members in the public state, and 
the owner already has Modify portal content, Set own password and Set 
own properties.

--
Rob Campbell

Rob Miller wrote:
> this isn't specific to remember or membrane or anything, but you'll get 
> lots of useful info about debugging unauthorized errors here:
> 
> http://plone.org/documentation/how-to/debug-unauthorized
> 
> this will allow you to get detailed tracebacks, which will be necessary 
> to debug the issue.
> 
> -r