    void requestResetPasswordWithoutPR() throws Exception
    {
        when(this.authorizationManager.hasAccess(Right.PROGRAM)).thenReturn(false);

        assertNull(this.scriptService.requestResetPassword(mock(UserReference.class)));
        verify(this.resetPasswordManager, never()).requestResetPassword(any());
        verify(this.resetPasswordManager, never()).sendResetPasswordEmailRequest(any());
    }
The software contains a mechanism for users to recover or change their passwords without knowing the original password, but the mechanism is weak.