fix: make email readonly in personal data form to prevent user lockout

src/Form/PersonalDataType.php

@@ -11,10 +11,13 @@ use Symfony\Component\Form\Extension\Core\Type\ChoiceType;
 use Symfony\Component\Form\Extension\Core\Type\EmailType;
 use Symfony\Component\Form\Extension\Core\Type\TextType;
 use Symfony\Component\Form\FormBuilderInterface;
+use Symfony\Component\OptionsResolver\OptionsResolver;
 
 /** @extends AbstractType<mixed> */
 class PersonalDataType extends AbstractType
 {
+    public const string LOCKED_EMAIL_HINT = 'Deine E-Mail-Adresse ist auch dein Benutzername. Bitte wende dich an den Kundenservice, wenn du sie ändern möchtest.';
+
     public function buildForm(FormBuilderInterface $builder, array $options): void
     {
         $builder
@@ -61,9 +64,18 @@ class PersonalDataType extends AbstractType
                 'placeholder' => 'Bitte auswählen...',
                 'preferred_choices' => ['D', 'A', 'CH'],
             ])
+            // The address level e-mail doubles as the BPN login identity, and a single BPN address
+            // can carry several of them for different persons. Editing it here would let one
+            // household member overwrite another's login, so forms that only change an existing
+            // address lock the field: Symfony ignores submitted data for disabled fields, which
+            // keeps the value BPN handed us on its way back into the update payload.
             ->add('email', EmailType::class, [
                 'label' => 'E-Mail',
                 'property_path' => 'communication.email',
+                'disabled' => false === $options['email_editable'],
+                'attr' => false === $options['email_editable'] ? [
+                    'title' => self::LOCKED_EMAIL_HINT,
+                ] : [],
             ])
             ->add('phone', TextType::class, [
                 'label' => 'Telefon',
@@ -78,4 +90,12 @@ class PersonalDataType extends AbstractType
             ])
         ;
     }
+
+    public function configureOptions(OptionsResolver $resolver): void
+    {
+        $resolver
+            ->setDefault('email_editable', true)
+            ->setAllowedTypes('email_editable', 'bool')
+        ;
+    }
 }