We've added a new case permission that controls which users can change the status of a case.

This permission can be assigned when creating custom roles.