Thanks for your response!
1. This is what I know, but some agents sometimes ignore this rule and do set new owner. For example, they set Bob as new owner, Bob receives notification and nobody else does, which is not desired behavior.
2. Hacking sources will be the last effort :)
--
regards,
Mihail