Greetings! I'm an admin at enwiki and I just encountered an unusual situation. A user who was editing from a globally blocked range (188.29.164.0/23) with global IP block exemption forgot their password and tried to reset it. The software gave them a message that "You cannot reset user's passwords because you are blocked globally". Again, this is an editor with global IPBE trying to use the "forgot password" function. The user was able to figure it out and report it at a noticeboard only because they were already logged in on their mobile device. If that had not been the case, they would have been prohibited from regaining access by the software, despite the lack of a block actually affecting their account, with no technical information on the block, no information on a means of recourse, and no capability to report the situation to any noticeboard globally while logged out. I eventually took a shot in the dark and disabled the global block on enwiki, which resolved the issue, but did not seem like a reasonable way of going about letting a user reset their password, and the user is understandably frustrated and shaken about the experience. I'm not sure if this is a bug or a simple oversight within the security features, but it does not seem like a situation that ever would have been intended. The mediawiki software should surely not lock out editors with IPBE who need to reset their passwords, and it should probably provide all users some sort of specific information on why they're being locked out and what to do to regain access to their accounts! You can see how the situation played out here.
