Application authorizations not working

[milousel]

Hello there,
I am having trouble using the Application Authorizations feature in the admin webapp.
I created a new users :

and new groups:

and then I create new authorizations roles for group support:

Then I test it on testUserThree which is member of group support, but its looks like nothing change. I still have access to cockpit and tasklist.
I already tried clear cache, logout and restart application. TestUserThree is only member in group support.
I created these app by by Camunda Initializr, but without Spring Security module. Can be problem missing Security module or I doing something wrong?

[Ingo_Richtsmeier]

Hi @milousel,

authorization checks are disabled by default for performance reasons. You have to enable them explicitly: Process Engine Configuration | docs.camunda.org

The required setting is camunda.bpm.authorization.enabled.

Hope this helps, Ingo