It seems the prudent thing would be to allow access to existing material while preventing them from doing anything to their account besides changing the password.