The function restinitapplication only need the password, when you create a new mapping with this function. The reason is very simple, this change the persistent configuration of your context, something normally only possible with the tag cfadmin. Changing any configuration in Railo needs a password as long write access is set to protected in the server admin for this context.
How to avoid using this password in application.cfc, of course you can simply set write access to open, then the password is not needed and you have the same security hole like in ACF or you can pass the password as parameter to the function.
/Micha
Von meinem iPad gesendet