Bullet-proof the private field filtering in the user resource.
Review Request #7425 — Created June 15, 2015 and discarded — Latest diff uploaded
The user API resource does some filtering on the payload data to remove any fields that the caller shouldn't see. If the payload data already has some information removed, it's possible that this could fail. We now bullet-proof this, removing only fields found in the payload.
Unit tests pass.