I suppose this isn't a real issue for "normal" Drupal usage. I've not found a work-around searching for the problem. Here's the dilemma...

  • During normal Drupal operation, users not logged in have the option to register, or request a new password. Great... everything according to plan.
  • Users that are already logged in never see the links for /user/register or /user/password request, and if they somehow end up on those pages, they get an "Access Denied" error. Not that big a deal, except...
  • I need for users who are logged in to be able to request passwords. I have an external application (Moodle) pulling data from the Drupal user table, and within Moodle, there's a link to the page for requesting a new password. And yup, you guessed it, it's a link to /user/password - and if they're logged into their account on the Drupal side and they get the "Access Denied" error, it's just another cause for confusion and some user hand-holding.
  • This is especially significant because I'm using Ubercart to handle the purchasing of course enrollments in Moodle, and part of the shopping cart check-out process auto-creates a new user account for site visitors that don't have one already. Then when they're directed to Moodle to log-in, and they didn't read that part of the email where their password is assigned...

Any thoughts as to a solution? I suppose for now I can direct users coming from Moodle to a static page telling them to first log out and then request a password. It's a bit of an awkward work-around though.

Thanks!
Klaus