by Björn Daunfeldt.
Found the problem, the role had the following capability as allowed: mod/assign:submit.
I guess some other administrator must have activated it, since it's "not set" as standard.
//Björn