AT:

• I can only run commands for tasks which belongs to one of the authenticated tenants
• if no authenticated tenant id is set then I can only run commands for tasks which belongs to no tenant
• if no authentication is set (i.e. no user id) then I can run commands for all tasks

Commands:

• saveTask
• deleteTask
• claim
• complete
• delegateTask
• resolveTask
• setAssignee
• setOwner
• getIdentityLinksForTask
• add / delete Candidate User / Group
• add / delete User / Group IdentityLink
• setPriority
• get / set / remove variable