Adjusted abstract collection service to handle permissions with stars in the middle. AbstractCollectionService Now delegates to an internal getItemsById which skips the permissions check (invoked anyway further down the execution path). Resolves USERGRID-915
added check for auth failure to root colleciton post on test case. USERGRID-915
Bug fix: OAuth 2 - Grant Type: Authorization Code - UG was redirecting the user to invalid redirect_uri.
Merge pull request #93 from albertoleal/92-oauth-authorization-code-bug-fix

Bug fix: OAuth 2 - Grant Type: Authorization Code
allow requests in the path /groups/* or /users/* to have more than 10 sub requests so Notifications can be sent to a large numbers of Users' Devices
Merge pull request #95 from apigee/USERGRID-1455

allow requests in the path /groups/* or /users/* to have more than 10 su...
added lightweight token endpoint as me resource which delegates to same method as token in mgmtResource. Fixes USERGRID-1370
Merge branch 'master' of github.com:apigee/usergrid-stack into management-me-token
Merge pull request #97 from apigee/management-me-token

Management me token
enable access to LockManager through ServiceManager
add ForbiddenServiceException for disallowed service operations. allow subclasses of AbstractCollectionsService to prevent delete of items.
Merge pull request #98 from apigee/USERGRID-1361

add ForbiddenServiceException for disallowed service operations and...
Merge pull request #86 from apigee/permisssions-middle

Adjusted abstract collection service to handle permissions with stars in...
switch hector used from org.hectorclient:1.1-2 to org.usergrid:1.1-2-1 (per Todd)
added validation for entity type
Bug fix: OAuth2 client_credentials flow should allow authentication via http 'Authorization' header.
Adding bug fix to getAccessTokenPostJson method. Now, it accepts client authentication via http header.
Merge pull request #102 from albertoleal/fix_client_credentials_auth_via_http_header

Bug fix: OAuth2 client_credentials authentication via http header
Validating client_id parameter.
remove reference swap entirely in favor of deep copy of batch object with synchronized clear. Addresses USERGRID-1481