Vendor Center is completely broken!

I tried to get a contract consultant to submit hours in the vendor center to be billed to the end customer.  Nothing has worked.  The problems:
1) The vendor cannot change their password if they are also a customer (as this consultant is, since they buy our hosting services), because then it is out of sync with their customer record, and they can only log into one of the two roles thereafter.  The workaround is to have the administrator manually set both passwords to be the same.  This is inexcusable, and insecure.
2) The vendor cannot submit time records because the end-customer jobs do not show up in the vendor center.   In fact, you cannot enter a job or a customer name in the time tracking form.  However, the form is there and APPEARS to work... until you try to use it.  Then you get an error asking you to enter the job or customer.  It looks like the people who wrote the code never tested it.