jira.permission.edit.denied still allows user to remove issue from epic

Summary

In JSW projects, adding the jira.permission.edit.denied or the jira.permission.edit.user=<user> property to a step in the workflow disallows you from editing that issue but does not stop your from modifying issues associated with it. For example, an Epic issue that has a workflow that blocks editing for other users does not stop them from moving stories out of the Epic.

Environment

• JIRA v1000.383.3

Steps to Reproduce

1. Create a Project (Project1)
2. Create an Epic in the Project (Epic 1)
3. Create an issue (Story1)
4. Assign Story1 to Epic1
5. Go to Workflow administration: https://<instance>/secure/admin/workflows/ListWorkflows.jspa
6. Click add workflow (Epic workflow)
7. Add status 'In Progress' and make sure we can get to this Status by setting all status' are able to transition into this
8. Click In progress
9. Click Properties
10. Add property: key: jira.permission.edit.user value: <username>, e.g. jashmore
11. Go to Project1 - Project Settings - Workflows
12. Add workflow (Epic workflow)
13. Assign this workflow to the Epic Issue type
14. Go back to the backlog
15. Transition Epic1 to In Progress
16. See that we cannot not add issues to Epic1.
17. Try to move issues out of the Epic, which is allowed

Expected Behavior

The story should not be able to be removed from the Epic

Actual Behavior

JIRA allows the issue to be removed from the Epic.

Workaround

None so far