Official comment
This is due to your permissions settings. If you assign them as owners, they will be able to update those cases. You can also create a custom action for these users that will let them bypass permissions and assign themselves to the cases.