adding role resets password? about expressa HOT 2 CLOSED

ok..i think i know what it was...during a PUT request of a user..the password was omitted automatically by the role-middleware.
I found a workaround, but im a bit afraid that my team will be bitten by this again.
Therefore I did a PR, which kindof 'reveals' all kindof magic performed by role-middleware:

#54

from expressa.

Ohh, that makes sense. For safety reasons I think it makes sense to omit the password, but I see now I have a pending TODO about this issue. So far, the approach I've been using for user updates is to POST to 'users/:id/update' with the following data.

var data = {
            $set: this.data,
            $unset: {'permissions': true}
          }

from expressa.