Client owners are not allowed to update the list of callback URLs

[NicolasLiampotis]

Hi,

Client owners should be allowed to update the registered callback URLs by themselves if the hostname(s) in the new URLs match the original hostname(s) that have already been approved by administrators.

[msalle]

I'm not entirely sure about this one. I'm reluctant to have automatically approved changes. I agree it seems safe when the hostname is the same, but we might be missing something... In any case, it will be quite some effort to make it work, since there is no API at all for this right now, so it would require a brand-new endpoint.