Set<String> pwdResourceNames = actual.getPwdPropRequest().getResources();
SyncopeUser user = binder.getUserFromId(updated.getResult().getKey());
pwdResourceNames.retainAll(user.getResourceNames());
final PropagationByResource pwdPropByRes = new PropagationByResource();
pwdPropByRes.addAll(ResourceOperation.UPDATE, pwdResourceNames);
updated.setPropByRes(pwdPropByRes);
if (!pwdPropByRes.isEmpty()) {
Set<String> toBeExcluded = new HashSet<String>(user.getResourceNames());
toBeExcluded.addAll(actual.getResourcesToBeAdded());