in service/src/main/java/org/apache/fineract/cn/identity/rest/UserRestController.java [154:157]
private void checkPassword(final Password password) {
if (password == null || password.getPassword() == null || password.getPassword().isEmpty())
throw ServiceException.badRequest("password may not be empty.");
}