Add cr remarks

ee/app/models/saml_provider.rb

 # frozen_string_literal: true
 
 class SamlProvider < ActiveRecord::Base
-  USER_ATTRIBUTES_LOCKED_FOR_MANAGED_ACCOUNTS = [:email, :public_email, :commit_email, :notification_email].freeze
+  USER_ATTRIBUTES_LOCKED_FOR_MANAGED_ACCOUNTS = %i(email public_email commit_email notification_email).freeze
 
   belongs_to :group
   has_many :identities

ee/app/services/ee/users/update_service.rb

@@ -3,6 +3,7 @@
 module EE
   module Users
     module UpdateService
+      extend ::Gitlab::Utils::Override
       include EE::Audit::Changes # rubocop: disable Cop/InjectEnterpriseEditionModule
 
       private
@@ -20,6 +21,7 @@ def model
         @user
       end
 
+      override :assign_attributes
       def assign_attributes
         params.reject! { |key, _| SamlProvider::USER_ATTRIBUTES_LOCKED_FOR_MANAGED_ACCOUNTS.include?(key.to_sym) } if model.group_managed_account?
         super

ee/changelogs/unreleased/force-notification-to-saml-email-ee.yml

 ---
 title: Block possibility to change email for users with group managed account
-merge_request:
+merge_request: 9712
 author:
 type: added