Running roundup_0.7.1 on a windows system.
Using 'classic' template and 'anydbm' backend.

Any one logged in can remove a message on the 'Issue 
Edit' page.
This seems very dangerous as it means that anyone can 
damage an issue (even if it only by accident).

I would suggest that the default operation should be 
that no one can remove a message. If this facility is 
really required then it should be set as an option and 
limited to admin and/or the originator.