From bef37d0cec47f46cd029b858896f65496f85ddf7 Mon Sep 17 00:00:00 2001
From: Jim Laurie <j.laurie6993@gmail.com>
Date: Wed, 6 Dec 2017 11:54:19 +0100
Subject: [PATCH] Remove password and token from fetchable data

---
 .../config/roles.json                              | 14 +++++++-------
 .../models/User.settings.json                      |  6 ++++--
 2 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/packages/strapi-plugin-users-permissions/config/roles.json b/packages/strapi-plugin-users-permissions/config/roles.json
index ae745776c5..f24d0a1332 100644
--- a/packages/strapi-plugin-users-permissions/config/roles.json
+++ b/packages/strapi-plugin-users-permissions/config/roles.json
@@ -414,33 +414,33 @@
         "controllers": {
           "auth": {
             "identity": {
-              "enabled": false,
+              "enabled": true,
               "policy": ""
             },
             "callback": {
-              "enabled": false,
+              "enabled": true,
               "policy": ""
             },
             "register": {
-              "enabled": false,
+              "enabled": true,
               "policy": ""
             },
             "forgotPassword": {
-              "enabled": false,
+              "enabled": true,
               "policy": ""
             },
             "changePassword": {
-              "enabled": false,
+              "enabled": true,
               "policy": ""
             }
           },
           "user": {
             "find": {
-              "enabled": false,
+              "enabled": true,
               "policy": ""
             },
             "findOne": {
-              "enabled": false,
+              "enabled": true,
               "policy": ""
             },
             "create": {
diff --git a/packages/strapi-plugin-users-permissions/models/User.settings.json b/packages/strapi-plugin-users-permissions/models/User.settings.json
index deef6b9210..2429ebb712 100644
--- a/packages/strapi-plugin-users-permissions/models/User.settings.json
+++ b/packages/strapi-plugin-users-permissions/models/User.settings.json
@@ -20,10 +20,12 @@
     },
     "password": {
       "type": "password",
-      "minLength": 6
+      "minLength": 6,
+      "select": false
     },
     "resetPasswordToken": {
-      "type": "string"
+      "type": "string",
+      "select": false
     },
     "role": {
       "type": "integer"