I have defined an assignee for a user task. According to the official Camunda 8 docs, the section on User tasks access restrictions, tasks can be prevented from being visible for other people who are not assigned to the task. In other words, when we assign a user task to a specific user by their username (defined in an IAM service like Keycloak), others cannot see or reassign the task. However, even if I define an assignee for my user task, all the people who have access to the tasklist can reassign the task and complete it. How can I prevent it?
PS: I have tried setting USER_RESTRICTIONS_ENABLED environment variable to true in Identity component.
It seems like adding an environment variable called USER_RESTRICTIONS_ENABLED takes effect after a while. It worked! You can take a look at the full thread on the Camunda forum here.