COMMONS-342 : Security of RESTful changing user's status : An user can only change his own status, system will not use RESTful to change status of specific user