It seems that all the user roles are able to change the requirements parents and hierarchy by using the tree view. Maybe should exist a role with permission to change requirement status but not the requirement hierarchy.
shout be settable by role in the admin interface
done - in the admin interface the flag can be set in the config file:
define("SUPERVISOR_IT_CHANGE_HIERARCHY", 1); //if SUPERVISOR IT roles can change requirements hierarchy and positions in projects - 1=yes, 0=no
-roles with such flag are users, supervisors and supervisors IT.
-consumers can't change positions and hierarchy
-project leaders and admins can always change positions and hierarchy
restrictions are set also in edit requirement page
Is there anything else need to be done here according to comments?