Hello,
sorry for warming up this old thread but the behavior of discourse is really causing problems right now.
If a user activates their Accounts on our platform (Discourse is only one of many platforms) we automatically create a Discord user via the API. We need to do this in order to assign the correct groups. If the user changes his email before first logging into Discourse via Discourse SSO, he will create a new Account (<username>1) and we have to manually merge the 2 accounts together.
Allowing the API to change the email would help to reduce a lot of manual work. And I guess Admins should also be allowed since they normally know what they are doing.
I would like to disallow users to change their Email Addresses but not the Admins and the API.