reciprocity/ggrc-core — pull request #1806 by bmomberger-reciprocity (2014-09-19 05:40:22+00:00)
Title: Only allow editing of CycleTaskGroupObjectTask assignee for certain roles

Those roles are:
admin;
WorkflowOwner; or
WorkflowAssignee.

The last of those is not a real role in GGRC at the moment. It's a combination of checking if the user is a WorkflowMember *and* a contact for at least one TaskGroup or TaskGroupTask in the Workflow.