this is not a standard feature, but i suspect people can guess why i'm filing this request (i'm 2 days behind on bugmail). user must change email address to match regexp [ ] until the user changes password, the user should not be allowed to take any significant database actions (change bugs). the regexp should be perfectly happy with a negative lookahead.

Hmm, you know, we really could have used this when we were working on eliminating all of the existing netscape.com accounts on Bugzilla. :)