Forward function allows authenticated users to change their 'Your Email:' address

I'd like the form to pickup the authenticated user's email address from their profile (which it's doing), but not allow them to change the value on the forward form. Optionally, this could be a permission, 'Override email address of sender', or some such thing.
Thanks,
Steve