Fix "Require Password Reset"

[stevenrombauts]

When enabling the "Require Password Reset" for a user, the user can't do anything once logged in. Resulting page:

We should remove the option or make it work again.

Update: this fails with a Manager account. An administrator or super administrator works.

[johanjanssens]

@stevenrombauts How do I replicate this?

[stevenrombauts]

@johanjanssens Steps to reproduce:

1. Create a new user in Manager group
2. Enable "Require password reset"
3. Log in as Manager in back-end: you will get a permission error.

The screenshot above is front-end: this is working now in current master. Back-end is still an issue:

The password reset form in back-end used to be in com_admin, we moved this to
com_users. The commit above fixes the redirect to it.

The issue that remains is that a Manager does not have permission to access com_users admin by default. Should we simply allow it now, or find another fix?

[johanjanssens]

@stevenrombauts I see the issues. I moved things indeed to clean up the code, lets fix this by allowing a manager to access com_users admin. Can you handle that?

[stevenrombauts]

@johanjanssens Ok, updated the data SQL to give Managers access to com_users.