We have permission scheme set , to allow anonymous user browse jira issue, but not to create them or edit them.
But anonymous user is able to change status of ticket.
This is weird because it works correctly for few issue type, but not for all.
* It works fine with issue type : bugs ; Anonymous user not does have permission to change anything on the page.
* But for other issue type : User story, Acceptance criteria : User can change status of the ticket without being logged in.
I found no setting where permission are based on issue type.