--- roundup-1.3.1/roundup/cgi/form_parser.py,orig	2006-10-06 00:12:12.000000000 -0400
+++ roundup-1.3.1/roundup/cgi/form_parser.py	2006-11-20 08:52:13.000000000 -0500
@@ -526,6 +526,21 @@
                 if got.has_key(entry):
                     required.remove(entry)
 
+            # If a user doesn't have edit permission for a given property,
+            # but the property is already set in the database, we don't
+            # require a value.
+            if not (create or nodeid is None):
+                for entry in required[:]:
+                    if not self.db.security.hasPermission('Edit',
+                                                          self.client.userid,
+                                                          self.classname,
+                                                          entry):
+                        cl = self.db.classes[self.classname]
+                        print create, nodeid
+
+                        if cl.get(nodeid, entry):
+                            required.remove(entry)
+            
             # any required values not present?
             if not required:
                 continue