Hi Jordi,
I want to give people permission to manipulate bug reports but not
permission to push to our repo? Is this currently possible?
It is not possible, as far as I know (though I am not 100% sure).
The only finer-grained access control I'm aware of relates to what
people can do with tracker items, off the "Set Permissions" menu,
while every project member can commit to any source/web repository.
If you don't trust someone enough to not make changes to the repository
if you ask them not to, I suggest that you probably shouldn't trust them
enough to munge your bug reports, either :). If it's a matter of
avoiding mistaken commits, then they can do an anonymous checkout even
if they are a project member.
Best,
karl