Only users with 'change states' permission can change states