fetchAndLock returns no tasks after REST authentication enabled

Hi,

I’m using a modified 7.10.0 docker image, have enabled REST authentication and LDAP

I can login to the built-in webapps fine. I created an LDAP group and new user, then authorized that group to create deployments (ALL), Process Definitions (ALL), Process Instance (ALL) and Task (ALL)

Using the rest API I can create a deployment as this user. I then see in the actual user added to the Deployment authorizations list with READ and DELETE permissions on a specific instance ID.

I used tasklist to start a process as the ‘admin’ user.

the workflow has an external task. The external worker calls fetchAndLock using the same userid/pass as that used when creating the deployment. However the returned task list is always empty.

Do I need some other authorizations for this to work?

It worked before I enabled REST authentication.

thanks,
-brad

Still hoping to get feedback on this…