As a workaround for configuration control we created two projects.  The first project holds our actual items (requiremements, use cases, design components, etc) which are under configuration control.  The second project contains only change requests, categorized for each appropriate item type in the first project.  In the first project, only users in management roles have write permissions.  In the second project, users in all roles have write permissions. 

Using the relate tab, a user in the second project can relate his change request to an item in the first project and the relationship is created in both projects - this is good.  Unfortunately, the More Actions drop down on the "Relate It To" panel includes "Add Item" which permits that same user to add items of any type to the first project despite not having write permissions for that project -  this is not good.  Can the Add Items option be removed from this menu or disabled based on user role in the target project?