This likely means the project permissions are too loose. You'll want to review the permission scheme and/or project roles to ensure users only have the permissions they need. In the permission scheme, there is a specific permission for Assign Issues which drives the ability to change the assignee.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.