The 'editassessment.own' permission is not working the way is supposed to work. We have detected that when an assessment is published by an teacher, another teacher can come afterwards and change the "settings" of the published exam.
Steps to reproduce the issue:
1. Ensure role instructor has the 'editassessment.own' permission enabled and the 'editassessment.any' permission disabled for the site.
2. Instructor1 publishes an assessment.
3. Instructor2 clicks the "Settings" option in the published assessment.
4. Instructor2 is able to modify the published assessment settings from other instructors in spite of the 'editassessment.own' permission is enabled.