server/src/main/java/com/orientechnologies/orient/server/security/authenticator/ODefaultPasswordAuthenticator.java
protected OServerUserConfiguration createServerUser(final ODocument userDoc) {
    OServerUserConfiguration userCfg = null;
    
    if (userDoc.containsField("username") && userDoc.containsField("resources")) {
      final String user = userDoc.field("username");
      final String resources = userDoc.field("resources");
      String password = userDoc.field("password");    
    
      if (password == null) password = "";
    
      userCfg = new OServerUserConfiguration(user, password, resources);
    }
   
    return userCfg;
  }
protected OServerUserConfiguration createServerUser(final ODocument userDoc) {
    OServerUserConfiguration userCfg = null;
    
    if (userDoc.containsField("username") && userDoc.containsField("resources")) {
      final String user = userDoc.field("username");
      final String resources = userDoc.field("resources");
      String password = userDoc.field("password");    
    
      if (password == null) password = "";
    
      userCfg = new OServerUserConfiguration(user, password, resources);
    }
   
    return userCfg;
  }
Derived implementations can override this method to provide new server user implementations.