User controls no organizations and has no capabilities

As the documentation has no relevant information as to what this error means or how to fix it, I'm going to try here.

If I goto a user and manually assign "View User" capability, and Controlled Organization of "Top"My users can login! /hurray.I don't really want to do this for 40000+ users.

I've assigned "View User" and "Top" to the "User" admin role, which states:

Warning: Any Capabilities or Controlled Organizations assigned statically to the 'User' Admin Role will be implicitly assigned to all users. It is strongly recommended that Capabilities and Controlled Organizations rules be used instead to ensure conditional access

So far that warning message isn't holding up very well.

I've also created a Capabilities Rule & Controlled Organizations Rule

CapabilitiesRule =

<list>

<s>View User</s>

</list>

ControlledOrganizationsRule

<list>

<s>Top</s>

</list>

Using these rules does not work either, I just want to let my users login, and Change there Passwords.

[1118 byte] By [gavin] at [2007-11-26 9:28:55]
# 1
are your users logging in to /idm or /idm/user?you should only get that error if they try to log in to /idmDana ReedAegisUSADenver, COdana.reed@aegisusa.net"We are the identity company"
danareed at 2007-7-7 0:11:12 > top of Java-index,Web & Directory Servers,Directory Servers...
# 2
Or else just assign some organization to the user (just for troubleshooting).. like Top.Then try to login.....A
anokun7 at 2007-7-7 0:11:12 > top of Java-index,Web & Directory Servers,Directory Servers...