We have checked that. All fields are read write - the same as the original incident window we created our self service incident window from.
We have given our self service users a default PortalEndUser role. Does this need to be PortalAnalyst for them to log incidents?