Restricted changing states to those users with permission to do so
Admins can now grant permission to users to change states.