diff --git a/src/pretix/control/views/user.py b/src/pretix/control/views/user.py
index 82daa5e461..df9aa1b970 100644
--- a/src/pretix/control/views/user.py
+++ b/src/pretix/control/views/user.py
@@ -829,6 +829,9 @@ class UserPasswordChangeView(FormView):
     template_name = 'pretixcontrol/user/change_password.html'
 
     def get_form_kwargs(self):
+        if self.request.user.auth_backend != 'native':
+            raise PermissionDenied
+
         return {
             **super().get_form_kwargs(),
             "user": self.request.user,
@@ -867,6 +870,9 @@ class UserEmailChangeView(RecentAuthenticationRequiredMixin, FormView):
     template_name = 'pretixcontrol/user/change_email.html'
 
     def get_form_kwargs(self):
+        if self.request.user.auth_backend != 'native':
+            raise PermissionDenied
+
         return {
             **super().get_form_kwargs(),
             "user": self.request.user,