The setCredentials() method should allow the authenticated resource to set its own credentials, even without explicit RESET-CREDENTIALS permission.
In other words, if the authenticated resource is trying to (re-)set its own credentials, the setCredentials() method should bypass the permission lookups and validation.
The
setCredentials()
method should allow the authenticated resource to set its own credentials, even without explicitRESET-CREDENTIALS
permission.In other words, if the authenticated resource is trying to (re-)set its own credentials, the
setCredentials()
method should bypass the permission lookups and validation.