introduce new permission TICKET_COMMENT
|Reported by:||anonymous||Owned by:||Jonas Borgström|
|Severity:||major||Keywords:||permission, ticket, TICKED_MODIFY|
You see it yourself at your own installation - anonymous users not only comment but change already set properties, too.
It is very annoying to see these users reset the ticket's severity or priority. But, if you restricted TICKED_MODIFY to 'authenticated' anonymous users can't comment a ticket.
Therefore I believe splitting TICKED_MODIFY into two permissions or adding a new permission TICKET_COMMENT will solve this issue.