a1dert/lh-tickets-test — Issue #421: When an employee resets his/her own password, (s)he has to logout before accessing the link with the password reset token.
Author: a1dert
Created: 2011-11-30 12:15:40+00:00
State: open

Imported from lighthouse. Original ticket at: http://redtape.lighthouseapp.com/projects/59696/tickets/106. Created by Adina Moldovan - 2010-11-22T12:04:41Z

Steps to reproduce:
1. Login as employee
2. Navigate to Settings
3. Click on Reset password
4. Check your email and click on the password re-set link

Expected result: When I access the password reset link, the Reset Password screen is displayed and I can fill in the new password and confirm it.

Actual result: If I access the link without logging out first, I get the same message saying that the reset password email has been sent, and no password re-set page is displayed. A normal user, that doesn't know the password reset mechanism, may not guess the workaround with the logging out first.