Perhaps finer permissions would be in order, too. Ie. make it only possible to
assign tickets *to* the devs and *by* some people.

But frankly we don't use the assign field much... perhaps it will change.