[otrs] user group permissions

Hi, I am giving just a 'ro' permission for a user over a group but the user can change owner of the tickets and priorities of the tickets. Is it possible to correct it? Thanks -- Using Opera's revolutionary e-mail client: http://www.opera.com/m2/