MT#6789 Add switch to allow anonymous pwd recovery

lib/NGCP/Panel/Controller/Subscriber.pm

@@ -584,6 +584,9 @@ sub reset_webpassword :Chained('base') :PathPart('resetwebpassword') :Args(0) {
 sub reset_webpassword_nosubscriber :Chained('/') :PathPart('resetwebpassword') :Args(0) {
     my ($self, $c) = @_;
 
+    $c->detach('/denied_page')
+        unless($c->config->{security}->{password_allow_recovery});
+
     my $posted = $c->req->method eq "POST";
     my $form = NGCP::Panel::Form::Subscriber::RecoverPassword->new;
     my $params = {};

ngcp_panel.conf

@@ -76,6 +76,7 @@ log4perl.appender.Default.layout.ConversionPattern=%d{ISO8601} [%p] [%F +%L] %m{
   password_musthave_uppercase	0
   password_musthave_digit	0
   password_musthave_specialchar	0
+  password_allow_recovery	0
 </security>
 
 <callflow>

share/templates/login/login.tt

@@ -29,7 +29,7 @@
         -%]
         [% c.loc('Go to [_1] login.', links.join(c.loc(' or '))) %]
         <br/>
-        [% IF realm == 'subscriber' -%]
+        [% IF realm == 'subscriber' && c.config.security.password_allow_recovery -%]
         [% c.loc('Forgot your password?') %] <a href="[% c.uri_for_action('/subscriber/reset_webpassword_nosubscriber') %]">[% c.loc('Reset Password') %]</a>.
         <br/>
         [% END -%]