[Profile Emails] Allow college members to set primary addresses ONLY for non-registered profiles

Currently, all Editorial College members have the scipost.can_validate_profile_emails permission, which allows them to mark profile addresses as primary. This power should be limited to the subset of profiles without an active contributor account associated to them, for which no greater authority exists. In the case of registered users, they alone should be the actors capable of setting their primary communication address, now easily accessible via the email preferences pane.

added Security 🔒 impactlow priorityhigh labels

set weight to 1

I agree with the overall description. I would, however, like to note that there needs to be a workflow for the fellows to report to the administration cases when emails become obsolete.

changed iteration to Two-week Sprint Sep 8, 2024 - Sep 21, 2024

added time estimate of 45m

assigned to @gkatsikas

added workflowin-progress label

added 30m of time spent

added workflowready label and removed workflowin-progress label

closed with commit d3f44b57

mentioned in commit d3f44b57