Absolutely sys admin should be able to not allow typical users to change their e-mail address - particularly if it's a WF + Proof integrated instance.
Changing the e-mail in Workfront creates a NEW user in Proof with the new e-mail address, while the old user is de-activated. Unfortunately, any W...