I want to give only TASK_WORK authorization to a user so that the user should only be able to claim the task and complete the task.
I tested this in Camunda Tasklist. The user is still able to change the assigned user of the tasks. Is this a bug or did I misunderstand the TASK_WORK authorization?
From the documentation:
The intuition behind “Task Work” is that it only authorizes the user to work on a task (i.e., claim and complete it) but not assign it to another user or in another way “distribute work” to colleagues.