Asset Suite / PassPortGeek

Not sure if this is the right place to ask this question as it is more application than technical issue, but here it is anyway. It appears that security for Action Request attributes functions differently than security for AR Assignments attributes. Once a user accepts the Assignment, no-one else can edit the attributes. On the Action Request, it appears that anyone can edit the Action Request attributes as long as the AR is not completed. I can't find a security event or preference that manages this. Does anyone know more about this or see this as a problem? thanks!