Context:
See parent task.

AT:

• there is a CRUD Rest API for user/group permissions on event based processes
  • for more functional details see parent task
• new event based processes have the creator of the process as a default permissions entry
• the last permission entry cannot get deleted
• for role entries with a missing type, the type is resolved if neither a user or group with that id exists an error is thrown
• the API is documented