Rob Miller wrote:
> ah, well, you must realize that the user will NOT have the Owner role at 
> this point.  she's not logged in, she's trying to set her initial 
> password.  any time the user goes through the PasswordResetTool process, 
> she will be anonymous.
> 
> i'm pretty sure this works already in Plone 2.5, although i don't 
> remember exactly how it was handled.  and maybe it's broken and i just 
> don't know it... :-P.  unfortunately, i don't have time to dig into it 
> any further at the moment.  if i can, i'll take a look over the next few 
> days to see what i can discover.
> 
> -r

Ok, that would explain the error.  Would adding the Set own password 
permission for Anonymous users fix it?  Would that cause security 
problems allowing any Anonymous user to change any password?

--
Rob Campbell