# What are the implications of letting oauth2 users change their email addresses?

**URL:** <https://meta.discourse.org/t/what-are-the-implications-of-letting-oauth2-users-change-their-email-addresses/170371>\
**Category:** Product Support\
**Created:** [November 17, 2020, 4:00pm UTC](https://meta.discourse.org/t/what-are-the-implications-of-letting-oauth2-users-change-their-email-addresses/170371 "2020-11-17T16:00:20Z")\
**Posts on this page:** 1\
**Showing post:** 14

<div class="post-metadata">

**Author:** ![sam](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/sam/32/102149_2.png) [@sam](https://meta.discourse.org/u/sam)\
**Post date:** [November 17, 2020, 11:12pm UTC](https://meta.discourse.org/t/what-are-the-implications-of-letting-oauth2-users-change-their-email-addresses/170371/14 "2020-11-17T23:12:06Z")

</div>

> [@mattdm](#):
>
> How can I make it so users can just do the first of those?

I do not think we have this flexibility at the moment, closest you can probably do is disable fiddling with primary via CSS.

OAuth is keyed on a special key anyway, so the impact of fiddling with primary email should be extremely low, login will still work and be associated to the main fedora account.

---

_[View the full topic](https://meta.discourse.org/t/what-are-the-implications-of-letting-oauth2-users-change-their-email-addresses/170371)._