I have a default uncustomized installation of DNN 6.2.  When a user goes to look at a "friends" profile, all of the contact info just shows asterisks (******).  How is this resolved?

You can see a screen shot at http://dnn62.secureshd.com/portals/0/Asterisk.png

Yes, it does some.  I have been playing around and with the field security settings and have found some quirks:

1)  If I go to Admin > Site Settings and change the field visibility it only effects NEW user and does not change the visibility of existing user profile data.

2)  The user is also able to manage the visibility of their own profile fields by clicking the small lock icon beside the field when they edit their profile.  I expect this to override the default visibility that is set in Admin > Site Settings, but it appears to have no effect.  If a field visibility is set to "Admin Only" in Admin > Site Settings and the user changes the visibility to "All Users" in their individual profile, the field is still not visible.

I can *sort of" see why issue 1 might be the intended behavior, but issue 2 sure seems like a bug.  Can anyone shed any light on this?