...

Issue level permission can be achieved through "dynamic user" fields which values can differ on an issue basis (e.g. "Assignee" or "Group Custom Field"). 

That is not clearly described in JIRA documentation hence most users are not aware of this consequence of using "dynamic user" fields in permission scheme. 

Screenshot below present WORK ON ISSUES permission configured on an issue level basis:

Hide Time Tracking add-on 

...