diff --git a/packages/server/src/api/controllers/row.js b/packages/server/src/api/controllers/row.js
index 3c4c19eed2..43d831dc60 100644
--- a/packages/server/src/api/controllers/row.js
+++ b/packages/server/src/api/controllers/row.js
@@ -96,7 +96,10 @@ exports.patch = async function(ctx) {
   // Creation of a new user goes to the user controller
   if (row.tableId === ViewNames.USERS) {
     // the row has been updated, need to put it into the ctx
-    ctx.request.body = row
+    ctx.request.body = {
+      ...row,
+      password: ctx.request.body.password,
+    }
     await usersController.update(ctx)
     return
   }