It seems that every project member can change status in a workflow, e.g. defect from fixed to verified.
 
Finally, there should be the possibility to define rights for such steps. E.g. only defined reviewers are allowed to change the status from fixed to verified.