How can I prevent users with "Browse Project" rights from editing statuses on issue they aren't assigned to?

[Daniel Pasacrita]

I'm having trouble believing that this is even a thing, but it seems to be very difficult to prevent users that are not assigned to an issue from changing the status of said issue. I see no reason why they should be able to do that, and I can't believe that isn't an option in the permission scheme. There is no reason they would ever need to do that. The way I have the permissions set up now, a group of users is not able to do anything except browse the issues in a project. Why does that also include changing statuses???? How can I prevent this? I want people to be able to browse the project but not touch it at all.

[Daniel Pasacrita · Accepted solution]

Okay, I figured it out, I'm dumb. Workflow transitions have their own permissions that you have to give them. Without setting any, anybody can change the status.