I am also looking for this enhancement, where, an authenticated user 
should not be allowed to select a ticket state, instead it should it 
should be set to default state only.

Yes, they don't have those permissions after the ticket is created; 
but they (somehow) have them at the time of ticket creation.

So you're saying that once the ticket is created, those same users do 
not have permissions to update the ticket to be Assigned/Accepted?

I'm not wanting to force them to two steps.  On my system, I have 3 
ticket states (unconfirmed, assigned, accepted) that are available to 
regular authenticated users when they create a ticket. The default 
state is uncomfirmed. Guest users can only create a ticket with 
"unconfirmed" as the state. Their should be a way to force 
authenticated users to use the default state defined for the ticket 
type.

if they can then go and update the ticket to the new state, why do you 
want to force them to use two steps?

No, you're missing what I'm trying to say. On my system, I have the 
child permissions their, but none of them (authenticated, guest, 
creator, etc.) are checked on any of the child permissions (of my 
queues), but still yet; authenticated (non-administrator) users can 
create a ticket at whichever state they choose, but guest users can 
not.  Thank you for your patience.

Oh. Well that's the assign/update sub-permissions (they're child 
permissions of queues).

I don't think that *all* authenticated users should have the ability 
to specify state of a ticket. Sorry for the confusion. I think the 
guest way works nice, but when the horde users go to submit a ticket, 
they have the ability to specify state; I don't think that should be 
the case by default. I think there should be a permissions setting to 
specify which (if any) authenticated users have permissions to specify 
ticket state at creation of ticket.

Yes, I meant authenticated users when I said "authed users".

... assuming that when you said "authed" users, you meant 
unauthenticated users?

We should honor the Assign/Update queue sub-permissions for guests. 
That should take care of this.

Recently I setup whups and found that when users are authenticated, 
they have the permissions to change the state of their ticket to 
whatever they want at the creation of the ticket. However Guest users 
are forced to use the default state defined by the administrator. I 
think their should be an enhancement in permissions or something to 
allow the administrator to specify whether or not authed users must 
use default states.