postfix - how to prevent users from sending with another users name
In your
smtpd_sender_restrictions =
you should have (possibly among other things):
reject_authenticated_sender_login_mismatch,
You must have smtpd_sender_login_maps defined to provide a username to email address mapping.