Not sure if this is an issue or a lack of understanding on my part...

I was trying to set up a security scheme that would allow, say, an external user to set an issue's resolution but not its status.

I added the External Users global group to the security scheme with the Resolve Issues role but not with the Close Issues role. Logging in as an external user, I could see both fields but could alter neither. Only by adding the External User group with the Update Issue Progress role could I alter the resolution, but then I could alter the status too.

Am I misunderstanding the purpose of the Resolve Issues and Close Issues roles? Is it possible to achieve my aim?

Thanks,
Nigel.