You should be able to retrieve a list of Assignable users, given a project.
All permission checks should be made - can they assign an issue?

I was going to make this a more general getUsersWithPermission but thought this was better.