I’ve have somehow wired permissions configuration on my website and now I need to know how is the standard setup.

When some of my users request a new password (url/user.php#lost) and receices a confirmation mail (url /lostpass.php?email=mailname@mail.com&code=xxxxxx) or if the user is new and receives a user validation mail (url/modules/profile/activate.php?op=actv&id=xxx&actkey=xxxxxx) he needs to authenticate.

I don’t know what or when I changed the settings, but I’m pretty sure it got something to do with the access permissions to that module. But I’m not sure, if it’s the system module or the extended profiles module, and additionally I do not know where to change the settings.

So I better ask you.

Thanks in advance, hope someone can give me a hand on this.

Have a look at the adminpages:
> system admin > preferences > User Info Settings > Select activation type of newly registered users > make your choise here.

First of all Thanks a lot.
I did that and the option selected is right, or well the one I want. "Requieres user activation (recomended).

My problem is when the users clicks on the link in the activation mail an login prompt pops up and he has to login. But he has not activated his account yet.

Another problem is when a user wants to reset hes password cause he forgot it. When he clicks on tha confimation link in the confirmation mail, he recieves a login prompt to complete the process. Well he cant login cause he doesnt know his password.