--- a/sobjects/ldapparser.py	Fri Jul 20 09:22:51 2012 +0200
+++ b/sobjects/ldapparser.py	Thu Jul 19 16:41:10 2012 +0200
@@ -71,7 +71,9 @@
         session.commit(free_cnxset=False)
 
     def update_if_necessary(self, entity, attrs):
-        entity.complete(tuple(attrs))
+        # disable read security to allow password selection
+        with entity._cw.security_enabled(read=False):
+            entity.complete(tuple(attrs))
         if entity.__regid__ == 'CWUser':
             wf = entity.cw_adapt_to('IWorkflowable')
             if wf.state == 'deactivated':