Password reset on disabled user

[alexander-schranz]

Q	A
Bug?	no
New Feature?	no

Actual Behavior

You can reset a password of a user which is not enabled.

Expected Behavior

A. User can not disabled because he has not confirm his Mail Address
B. User can reset the password and is automatically enabled because he did confirm the email over the password reset link.

[alexander-schranz]

I'm for B. what you think @wachterjohannes

[wachterjohannes]

enabled because he has not confirmed his user? or disabled because of an "administrator"? in my opinion the user should not be able to send a password forget email if his user was not confirmed after registration.

[alexander-schranz]

@wachterjohannes until it is not possible to resend the confirmation email (#37) I would go for B.