protected void setPassword(String userName, String oldPassword, String newPassword, boolean raw) throws SecurityException
{
InternalUserPrincipal internalUser = securityAccess.getInternalUserPrincipal(userName, false);
if (null == internalUser)
{
throw new SecurityException(SecurityException.USER_DOES_NOT_EXIST.create(userName));
}
Collection credentials = internalUser.getCredentials();
if (null == credentials)
{