I'm having trouble believing that this is even a thing, but it seems to be very difficult to prevent users that are not assigned to an issue from changing the status of said issue. I see no reason why they should be able to do that, and I can't believe that isn't an option in the permission scheme. There is no reason they would ever need to do that. The way I have the permissions set up now, a group of users is not able to do anything except browse the issues in a project. Why does that also include changing statuses???? How can I prevent this? I want people to be able to browse the project but not touch it at all.
Okay, I figured it out, I'm dumb. Workflow transitions have their own permissions that you have to give them. Without setting any, anybody can change the status.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.