When a user creates a new ticket, they should only be able to set the basic details (summary & description).
From there the admin user should assign the ticket to a user, milestone, component etc. as most of the time when a user creates a ticket they assign it wrong, and the admin knows better which component/milestone the ticket should belong to. (same as Lighthouse or Github issues)
I will add more control over ticket property permissions in 3.1.