Trevor Morris

Allow caller with uaa.admin scope to change a user's password

11

The documentation for the change user password call says, for Authorization: Access token with password.write or uaa.admin required However the current configuration only allows the call if the caller has...

Unnecessary logging of "avoiding infinite loop" in ResolverFully

1

This is a very minor issue but I think the debug logging in ResolverFully.resolveSchemaProperty may be incorrect. It currently logs (at debug level) "avoiding infinite loop" if it _doesn't_ find...