cvs Repository Password Change

[William]

My CVS repository's admin asked my coworker to telnet into the server 
(i.e. tocvs) and change his password, then login on the machine hosting 
my coworkder's working directory (i.e. mkmxg00).  My coworker was able to 
cvs login to mkmxg00 without a user ID set up on tocvs.

Question) If my coworker can cvs login to mkmxg00 without a user ID on 
tocvs, what is the point of changing the password on tocvs?