Bug 180545 - It was possible to change the product/component of a bug without having the editbugs permission.
r=bbaetz
a=justdave