[Trac-tickets] [The Trac Project] #3289: only users with TICKET_MODIFY permission should change ticket owner or be assignable to tickets (restrict_owner)

[The Trac Project]

#3289: only users with TICKET_MODIFY permission should change ticket owner or be
assignable to tickets (restrict_owner)
---------------------------+------------------------------------------------
 Reporter:  wkornew        |       Owner:  cmlenz
     Type:  defect         |      Status:  new   
 Priority:  normal         |   Milestone:  0.10  
Component:  ticket system  |     Version:  0.9.5 
 Severity:  normal         |    Keywords:        
---------------------------+------------------------------------------------
 Currently, TICKET_CHGPROP allows for changing the assigned user or
 accepting a ticket, but this operation belongs to the planning process and
 thus should be restricted to TICKET_MODIFY. This also means that
 restrict_owner should only show users with TICKET_MODIFY permission.

-- 
Ticket URL: <http://projects.edgewall.com/trac/ticket/3289>
The Trac Project <http://trac.edgewall.com/>