why are fields who are not listed in the rules array not saved into my database?
example: Username is listed in the safeAttributes array but not in the rules array, when i fill in the form everthing is stored in my database except the field Username.
but how can i assign them manually like if an user update his details but not his password. so the password will be blank and have to be ignored by the AR during a update action.
This is not exactly manual assigning per se. This very specific use case has been described many times before, please use the search function to find the right answer.