Moved some permission checks for issue update from controller to model.
Authored by: jplang 2010-11-11
Parent: [r4392]
Child: [r4394]