Bullet-proof the private field filtering in the user resource.

Review Request #7425 — Created June 15, 2015 and discarded — Latest diff uploaded

Information

Review Board
release-2.0.x

Reviewers

The user API resource does some filtering on the payload data to remove
any fields that the caller shouldn't see. If the payload data already
has some information removed, it's possible that this could fail. We now
bullet-proof this, removing only fields found in the payload.

Unit tests pass.