I'm trying to configure an ACL that would disable users from changing their font when composing an email.

The corporate identity is set and we don't want people mucking it up.