Merge changes I64307527,Id230f8b1 into udc-dev

* changes:
  Headless fixes for cross profile apps.
  Throw SecurityException when an admin uses the setUserRestrictionGlobally method.