Unlike all the other user resources, the callback _user_resource_create() doesn't call services_remove_user_data() to remove sensitive data from the user object.

Comments

kylebrowning’s picture

kylebrowning commented
Issue summary: View changes
Status: Active » Closed (won't fix)

This is because it would remove the mail field when attempting to create a new user.