diff --git a/apps/provisioning_api/lib/Controller/UsersController.php b/apps/provisioning_api/lib/Controller/UsersController.php
index 1c7522d430..ca38a1d49c 100644
--- a/apps/provisioning_api/lib/Controller/UsersController.php
+++ b/apps/provisioning_api/lib/Controller/UsersController.php
@@ -309,11 +309,6 @@ class UsersController extends OCSController {
 			$permittedFields[] = AccountManager::PROPERTY_EMAIL;
 		}
 
-		$permittedFields[] = 'password';
-		if ($this->config->getSystemValue('force_language', false) === false) {
-			$permittedFields[] = 'language';
-		}
-
 		if ($this->appManager->isEnabledForUser('federatedfilesharing')) {
 			$federatedFileSharing = new \OCA\FederatedFileSharing\AppInfo\Application();
 			$shareProvider = $federatedFileSharing->getFederatedShareProvider();