I've never experienced such problem. Do you know how to reproduce it ? is the password hash changed in the database ?
I just did it again. Here is what I did:
1. Logged in as cuoz user, verified that it worked.
2. Logged out
3. Logged in as admin user
4. Edited cuoz user (didn't enter any password changes) and saved the settings.
5. Logged out
6. Tried to login as 'cuoz', couldn't. Retrieve lost password, login, reset password, all is fine.
I didn't confirm if the has in the db changed. I'll try and do that next assuming I can reproduce reliably.
yes without a reproducible scenario it's hard to find out what's going on
It's simple to reproduce now. And yes, the hash in the DB changes.
Login as user, logout, login as admin, change the user's settings, log out, login as user fails and db is changed.
I will fix that
Ok, the password is getting set to an empty string. Don't know why I didn't try that before. But, it looks like if you don't supply a new password when you update other settings, it just stores an empty one.
I guess, could you file a bug report on sourceforge ?
I filed bug report 970756