I have a Community where I want to direct users to a custom VF page so they can reset their password (I've disabled the Custom VF Page) to confirm why this might be happening.
I generate the link with {!Community_Url}
as specified in the template e-mails that are created and here: Communities forgot password emails?
When I follow the link in another Sandbox using the same configuration I'm able to change the user's password, however, after deploying to another sandbox, when I open the link I get:
Insufficient Privileges
You do not have the level of access necessary to perform the operation you requested. Please contact the owner of the record or your administrator if access is necessary.
Again, I've disabled the custom VF page in the community manager, the link opens the: /secur/forgotpassword.jsp?token
URL relative to my sandbox.
Update
I've noticed that clicking: "Reset Password" From the admin console sends a link that works.
In my page I'm using the typical method to reset the password:
boolean success = Site.forgotPassword(username);