Camunda claim task via REST not checking user

[hassang]

Hi @rathina_karthik,

I believe @Ingo_Richtsmeier gave a comprehensive answer.

If you are interested, you can find an example of a generic task listener to validate assignee existence in below post

Claim Task With InvalidUser

Hi @gumang, The core of the Camunda engine treats users , groups and tenants as simple text strings https://camunda.com/best-practices/securing-camunda/#_understanding_strong_users_strong_strong_groups_strong_and_strong_tenants_strong Validation of assignee existence could by implemented by a generic task listener to be triggered on assignment event. identityService = delegateTask.getProcessEngineServices() .getIdentityService(); processEngine = Context.getProcessEngineConfiguration() …