All using cfproperty inject=”model.user” (etc. etc.).
User.cfc has cfproperty inject=”setting:bannedIPs” and this setting gets injected before afterConfigurationLoad (or at least it seems to).
Therefore, if coldbox.cfc doesn’t have the setting bannedIPs, it breaks straight away, and if I add it as an empty string in colbox.cfc, it never gets updated by afterConfigurationLoad…